[
https://issues.apache.org/jira/browse/TS-3358?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14336745#comment-14336745
]
ASF subversion and git services commented on TS-3358:
-----------------------------------------------------
Commit 15fee84b62972befa7e66ee681d10b0b3acfe45d in trafficserver's branch
refs/heads/master from [[email protected]]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=15fee84 ]
TS-3358: expand the definition of a privileged management API caller
To preserve backwards compatibility, redefine privileged management
API callers as root (uid 0), or the management user (ie/ the user
traffic_manager is running as).
> add access checking to the management API
> -----------------------------------------
>
> Key: TS-3358
> URL: https://issues.apache.org/jira/browse/TS-3358
> Project: Traffic Server
> Issue Type: Improvement
> Components: Configuration, Management API
> Reporter: James Peach
> Assignee: James Peach
> Fix For: 5.3.0
>
>
> Many of the most common uses of the management API are checking metrics and
> configuration values. For these read-only cases, running {{traffic_line}} as
> root is overkill. Add unix domain socket credential checking so that we can
> allow read-only operations to be performed by unprivileged processes. This
> change also adds a configuration option to retain the current behaviour
> (retained by default).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
