[AMBARI-25390] Ambari is indexing all subdirectories contents under /resources folder via API.

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: trunk, 2.7.4
• Fix Version/s: 2.8.0, 2.7.5
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Andrew Onischuk
• Reporter: Andrew Onischuk
• Created: 04/Oct/19 11:03
• Updated: 14/Nov/22 16:39
• Resolved: 06/Oct/19 16:40

Description

GET /resources gives back the directory content of /var/lib/ambari-server/resources. The directory doesn't contain any sensitive information, only files which are already visible on github. But it might freak out security guys therefore it's best to disable the listing.

Issue Links

• is related to: AMBARI-25252 Disable directory Indexing at /resources
• links to: GitHub PR#3495
• links to: GitHub Pull Request #3093
• links to: GitHub Pull Request #3094