Tickets :: [#7317] Shell feature should be disabled by default

Summary	Shell feature should be disabled by default
Queue	Horde Base
Queue Version	3.2.1
Type	Bug
State	Not A Bug
Priority	1. Low
Owners
Requester	dev (at) nigelj (dot) com
Created	09/10/2008 (6149 days ago)
Due
Updated	09/11/2008 (6148 days ago)
Assigned
Resolved	09/11/2008 (6148 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

09/11/2008 12:34:09 PM	Jan Schneider	Comment #2 State ⇒ Not A Bug Priority ⇒ 1. Low	Reply to this comment
How is this a bug? Beside that, the shell is only available to administrators.

09/10/2008 09:21:43 AM	dev (at) nigelj (dot) com	Comment #1 State ⇒ Unconfirmed Priority ⇒ 3. High Type ⇒ Bug Summary ⇒ Shell feature should be disabled by default Queue ⇒ Horde Base Milestone ⇒ Patch ⇒ No	Reply to this comment
In interests of security it should be considered that the ability to access the horde shell should be disabled by default, while Fedora ships Horde as only accessible to 127.0.0.1 by default, the potential is still around that someone will open it all up, and any Tom, Dick or Harry could run just about whatever they wanted. For reference the downstream bug for EPEL/Fedora is: https://bugzilla.redhat.com/show_bug.cgi?id=461365 which has in my opinion far more concise reasoning for this request.