Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Regular user gain full access through Navigator. #60

Open
Sekenenz opened this issue Jan 5, 2023 · 1 comment
Open

Regular user gain full access through Navigator. #60

Sekenenz opened this issue Jan 5, 2023 · 1 comment

Comments

@Sekenenz
Copy link

Sekenenz commented Jan 5, 2023

Bug Info

Describe the bug
While testing I've noticed that any regular user (even without any permissions) can login to web console and navigate (Navigator) through the whole system with full permissions.

To Reproduce

  1. Add a new user
  2. Login to web console
  3. Use Navigator

Expected behavior
Browsing limited to user's folder.

Client Side

Desktop (please complete the following information):

  • OS: [MacOS Catalina]
  • Browser [chrome 108.0.5359.71]
  • Version [10.15.7]

Server Side

  • OS: [Debian 11]
  • Cockpit Version: [282-1~bpo11+1]
@lever1209
Copy link

needs more data, i just tested it and it doesnt work

maybe its improper setup? check the filesystem permissions and make sure you dont hit this button to get root privileges
image
it looks like this once you have root privliges
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants