[prev in list] [next in list] [prev in thread] [next in thread]
List: rsync
Subject: [Bug 1573] New: module revealed thru error msg even with "list = no"
From: samba-bugs () samba ! org
Date: 2004-07-30 18:23:38
Message-ID: 200407301823.i6UINcKn010012 () dp3 ! samba ! org
[Download RAW message or body]
https://bugzilla.samba.org/show_bug.cgi?id=1573
Summary: module revealed thru error msg even with "list = no"
Product: rsync
Version: 2.6.2
Platform: All
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: core
AssignedTo: wayned@samba.org
ReportedBy: widyono@seas.upenn.edu
QAContact: rsync-qa@samba.org
CC: widyono@seas.upenn.edu
"list = no" correctly hides via rsync _server_::, however if one tries
rsync _server_::_existing-module_/ and does not have permission, one gets
@ERROR: access denied to _user_ from _client_, whereas an attempt for a
non-existent module emits @ERROR: Unknown module '_non-existent-module_'
If "list = no" is used for security purposes (can't think of another reason at
the moment), this can be considered a security bug and thus I left severity at
normal instead of labeling it minor.
--
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
--
To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic