You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tooling.apache.org by "sbp (via GitHub)" <gi...@apache.org> on 2026/08/10 14:39:40 UTC
[I] Improve containment for secret configuration values (tooling-trusted-releases)
sbp opened a new issue, #1506:
URL: https://github.com/apache/tooling-trusted-releases/issues/1506
We should do the following:
* Run the server from an empty directory, so that all paths have to be explicitly configured.
* Remove the old deprecated root `secrets.ini` path.
* Restrict process such as rsync to `ro` only the directories that they are allowed to access, at kernel level.
* Potentially restrict workers to `ro` certain directories.
* Use a separate state root for embargoed release files.
We're also missing an instance of `--password-from-stdin` in one of our SVN calls.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Improve containment for secret configuration values (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #1506:
URL: https://github.com/apache/tooling-trusted-releases/issues/1506#issuecomment-5285617970
Resolved by 53fca676e8a0283243af2993b7e40b268064b841, 3894a78d67554ec8aaa4a34773ccc3b2f65e6c95, 916af219406f22101aee97b586c14b6f0637b356, 64bc8450a6816197d2cc46813dbb327d73d330a9, 18e5d2f8d4437e7264840a25db868b1151dd8d6f, and 98965e90d8b7d9c8cdaf1f9d00059f1f64ed0df0.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Improve containment for secret configuration values (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp closed issue #1506: Improve containment for secret configuration values
URL: https://github.com/apache/tooling-trusted-releases/issues/1506
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org