Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-17104

Protect lib directories from being writable

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • None
    • None

    Description

      Currently solr.xml has the "allowPaths" property that restricts the directories that Solr can access outside of its normal home, core, and install directories. This also limits where files can be written to.

      We should restrict that the various lib directories that Solr has can also not be written to.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. SOLR-16949 RCE via Backup/Restore APIs - Fix for all file extensions

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed
          links to

          Web Link GitHub Pull Request #2154

          Activity

            People

              houston Houston Putman
              houston Houston Putman
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h
                  1h