Issue #3092 has been updated by Luke Kanies.

Category set to network
Status changed from Needs design decision to Accepted
Keywords set to authoratization

I agree, this is a bug.

Is it sufficient to just allow a 'deny *' statement in the configuration?  That 
is to say, are the current defaults acceptable, as long as that additional 
setting is available?
----------------------------------------
Bug #3092: No entries means no security?
http://projects.reductivelabs.com/issues/3092

Author: Robin Powell
Status: Accepted
Priority: Normal
Assigned to: 
Category: network
Target version: 
Affected version: 0.25.1
Keywords: authoratization
Branch: 


For testing purposes, I had a fileserver.conf with:

[modules]

[plugins]

and nothing else.  This gives no security whatsoever; all access is allowed.  
Since @deny *@, which is what I _wanted_ to put in there, isn't allowed, this 
was _very_ confusing.

I would like to see that situation treated as "deny all", as the docs imply, 
and I would like @deny *@ to work.

-Robin


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to