New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple security concerns #86

Open

gmadrid opened this issue Jun 22, 2015 · 0 comments

gmadrid commented Jun 22, 2015

Cannot restrict access to 'localhost' only. Adding this options makes the rest of these issues less important.
Cannot restrict access to 'noparent' or similar means that /etc/passwd can be viewed on any machine running beefy.
Cannot exclude subdirectories means that entire source tree can be viewed under .git/ directory.

Because of these issues, my corporate security team will not let me run beefy on my workstation.

Also, everyone should care about security.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment