Encrypting DB passwords in the config

Jeff Weisberg jaw+arguslist at tcp4me.com
Mon Jan 8 22:27:43 EST 2007


On 8 Jan, 2007, at 10:25, Matt.A.Cleveland at healthnet.com wrote:

> Yes, I found this, but I also found what appears to be a bug.  If I
> restrict act_getconf for Top:a:b:c, then it properly restricts the  
> config
> for Top:a:b:c, but it still allows viewing the config for Top:a:b,  
> and the
> config includes the complete config for Top:a:b:c.  Is this behavior
> intentional?


that is the intended behaviour. acl_getconf controls who can
access the config, not the data that is displayed.




More information about the Arguslist mailing list