[ 
https://issues.apache.org/jira/browse/KARAF-7056?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Matt Pavlovich updated KARAF-7056:
----------------------------------
    Description: 
The sftp service could add virtual file system to support relocated 
directories, such as karaf.data, karaf.log, etc

Design notes:
1. relocatedDirectoriesEnabled = false (by default)
2. directoryDenyList = /, /etc, /root, /boot, /tmp, /home (sensible defaults)
3. When the folders are non-default, map karaf.data, karaf.log, etc to /data, 
/data/log (to appear as the default) in the sftp virtual fs structure (do not 
disclose the actual filesystem path to prevent information leak)
4. If a real folder called 'karaf.data' already exists, log a warn and do not 
map the relocated directory

  was:
The sftp service could add virtual file system to support relocated 
directories, such as karaf.data, karaf.log, etc

Design notes:
1. relocatedDirectoriesEnabled = false (by default)
2. directoryDenyList = /, /etc, /root, /boot, /tmp, /home (sensible defaults)
3. When the folders are non-default, map karaf.data, karaf.log, etc to 
/karaf.data in the sftp virtual fs structure (do not disclose the actual 
filesystem path to prevent information leak)
4. If a real folder called 'karaf.data' already exists, log a warn and do not 
map the relocated directory


> Add support for reloacted karaf.data and karaf.log dirs to sftp service
> -----------------------------------------------------------------------
>
>                 Key: KARAF-7056
>                 URL: https://issues.apache.org/jira/browse/KARAF-7056
>             Project: Karaf
>          Issue Type: Improvement
>    Affects Versions: 4.2.10
>            Reporter: Matt Pavlovich
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>             Fix For: 4.2.12, 4.3.2
>
>
> The sftp service could add virtual file system to support relocated 
> directories, such as karaf.data, karaf.log, etc
> Design notes:
> 1. relocatedDirectoriesEnabled = false (by default)
> 2. directoryDenyList = /, /etc, /root, /boot, /tmp, /home (sensible defaults)
> 3. When the folders are non-default, map karaf.data, karaf.log, etc to /data, 
> /data/log (to appear as the default) in the sftp virtual fs structure (do not 
> disclose the actual filesystem path to prevent information leak)
> 4. If a real folder called 'karaf.data' already exists, log a warn and do not 
> map the relocated directory



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to