Issue #3092 has been updated by Markus Roberts.

Status changed from Unreviewed to Needs design decision

This would be a significant behaviour change; the present assumption is that 
modules and plugins are accessable by default.
----------------------------------------
Bug #3092: No entries means no security?
http://projects.reductivelabs.com/issues/3092

Author: Robin Powell
Status: Needs design decision
Priority: Normal
Assigned to: 
Category: 
Target version: 
Affected version: 0.25.1
Keywords: 
Branch: 


For testing purposes, I had a fileserver.conf with:

[modules]

[plugins]

and nothing else.  This gives no security whatsoever; all access is allowed.  
Since @deny *@, which is what I _wanted_ to put in there, isn't allowed, this 
was _very_ confusing.

I would like to see that situation treated as "deny all", as the docs imply, 
and I would like @deny *@ to work.

-Robin


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to