You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@karaf.apache.org by da...@apache.org on 2013/11/27 12:17:48 UTC
svn commit: r1545997 - in
/karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc:
org.apache.karaf.command.acl.config.cfg
org.apache.karaf.command.acl.shell.cfg
Author: davidb
Date: Wed Nov 27 11:17:48 2013
New Revision: 1545997
URL: http://svn.apache.org/r1545997
Log:
Additional ACLs for the shell:new and shell:java commands
These commands are now limited to the admin role by default because they have the power to execute any piece of Java code...
Added:
karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.shell.cfg
Modified:
karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.config.cfg
Modified: karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.config.cfg
URL: http://svn.apache.org/viewvc/karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.config.cfg?rev=1545997&r1=1545996&r2=1545997&view=diff
==============================================================================
--- karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.config.cfg (original)
+++ karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.config.cfg Wed Nov 27 11:17:48 2013
@@ -1,3 +1,7 @@
+#
+# This configuration file defines the ACLs for various commands in the config subshell
+#
+
cancel = manager
delete = admin
edit = manager
Added: karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.shell.cfg
URL: http://svn.apache.org/viewvc/karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.shell.cfg?rev=1545997&view=auto
==============================================================================
--- karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.shell.cfg (added)
+++ karaf/trunk/assemblies/features/framework/src/main/resources/resources/etc/org.apache.karaf.command.acl.shell.cfg Wed Nov 27 11:17:48 2013
@@ -0,0 +1,8 @@
+#
+# This configuration file defines the ACLs for commands in the shell subshell
+#
+# Important to note is that the shell:new and shell:java commands are very powerful
+# as they can invoke any Java class available. Therefore they are limited to the admin
+# role here.
+new = admin
+java = admin