Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There's no way to limit acces to administrative commands #37

Open
mestia opened this issue Nov 18, 2016 · 5 comments
Open

There's no way to limit acces to administrative commands #37

mestia opened this issue Nov 18, 2016 · 5 comments

Comments

@mestia
Copy link

mestia commented Nov 18, 2016

Is there a way to limit the access to the text admin protocol ? It looks strange to me that a client can shutdown server for example.
Why not to use a different port for the admin protocol ?
Thanks!

@p-alik
Copy link
Collaborator

p-alik commented Nov 18, 2016

Regarding the topic I concerned without success in the group

@SpamapS SpamapS changed the title Limit acces to administrative commands There's no way to limit acces to administrative commands Nov 18, 2016
@SpamapS
Copy link
Member

SpamapS commented Nov 18, 2016

Totally legitimate problem. Also I think shutdown removal is something I could get behind if enough people agree to it, but I'd like to leave this as a more general issue.

@SpamapS
Copy link
Member

SpamapS commented Nov 18, 2016

To be clear... send me a patch, and ping the mailing list, and let's get shutdown removed in the next release. I think it's a stupid command to have in the admin protocol with or even without ACL.

@esabol
Copy link
Member

esabol commented Nov 18, 2016

+1

I agree that a client should not be allowed to shutdown the server.

If you are looking for a way to mitigate the concern right now, I recommend using supervisord to start gearmand. It can auto-restart gearmand if it ever exits.

P.S. "access" is misspelled in the issue title.

@p-alik
Copy link
Collaborator

p-alik commented Nov 21, 2016

Here is a PL related to the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants