6.0.0-RC7
6/19/26

[#7317] Shell feature should be disabled by default
Summary Shell feature should be disabled by default
Queue Horde Base
Queue Version 3.2.1
Type Bug
State Not A Bug
Priority 1. Low
Owners
Requester dev (at) nigelj (dot) com
Created 9/10/08 (6491 days ago)
Due
Updated 9/11/08 (6490 days ago)
Assigned
Resolved 9/11/08 (6490 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch No

History
912 Jan Schneider Comment #2
State ⇒ Not A Bug
Priority ⇒ 1. Low
Reply to this comment
How is this a bug? Beside that, the shell is only available to administrators.
439 dev (at) nigelj (dot) com Comment #1
State ⇒ Unconfirmed
Priority ⇒ 3. High
Type ⇒ Bug
Summary ⇒ Shell feature should be disabled by default
Queue ⇒ Horde Base
Milestone ⇒
Patch ⇒ No
Reply to this comment
In interests of security it should be considered that the ability to 
access the horde shell should be disabled by default, while Fedora 
ships Horde as only accessible to 127.0.0.1 by default, the potential 
is still around that someone will open it all up, and any Tom, Dick or 
Harry could run just about whatever they wanted.



For reference the downstream bug for EPEL/Fedora is: 
https://bugzilla.redhat.com/show_bug.cgi?id=461365 which has in my 
opinion far more concise reasoning for this request.

Saved Queries