Re: Potential Security Issue: Permissions in PgAdmin Installation Directory

Поиск
Список
Период
Сортировка
От Dave Page
Тема Re: Potential Security Issue: Permissions in PgAdmin Installation Directory
Дата
Msg-id CA+OCxoxsLdYma3VyceBims-=yTx7VfixLHPEqm3ULbTABcTmTQ@mail.gmail.com
обсуждение исходный текст
Ответ на Potential Security Issue: Permissions in PgAdmin Installation Directory  (Qasim Tahir <qasimtahir.qt1@gmail.com>)
Ответы Re: Potential Security Issue: Permissions in PgAdmin Installation Directory
Список pgadmin-hackers
Hi

On Thu, 30 May 2024 at 23:17, Qasim Tahir <qasimtahir.qt1@gmail.com> wrote:

Dear PgAdmin Community,

I am writing to report a potential security issue with the permissions set in the PgAdmin installation directory.

After installing PgAdmin, I observed that several directories, including 'bin', 'venv', and 'web', have 775 permissions. Here are the details of the directory permissions:image.png

Given the broad access provided by 775 permissions, there is a concern about the potential for unauthorized access or modifications. 


I would like to ask if these permissions are necessary for PgAdmin's operation or if they could be tightened to enhance security.

Your guidance on this matter would be greatly appreciated.

Thank you for your attention to this issue.


What platform and package is this exactly? 

--
Вложения

В списке pgadmin-hackers по дате отправления:

Предыдущее
От: Usman Khan
Дата:
Сообщение: Messages held for moderation
Следующее
От: Dave Page
Дата:
Сообщение: Re: Messages held for moderation