Mike R created NIFI-9937:
----------------------------
Summary: Prevent NiFi From Deleting Its Own Configuration Files
Key: NIFI-9937
URL: https://issues.apache.org/jira/browse/NIFI-9937
Project: Apache NiFi
Issue Type: Improvement
Affects Versions: 1.15.3, 1.16.0, 1.16.1
Environment: Linux and Windows
Reporter: Mike R
There should be a way for NiFi to be unable to delete the files in the .conf
directory using the GetFile Processor.
This is meant as a way to prevent unintended deletion of the files in the
directory by administrators and prevent attackers from using the GetFile
processor to delete files in the directory.
One way to do this would be accomplished is by changing the GetFile Processor
to not delete any file from the .conf directory, regardless of the user
selection. Another way is to change the permissions of the directory. Any
solutions are welcome, but this should be resolved.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
