kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-09-03 11:25:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

manager: prevent file access outside of config dir

Browse Source 
Add live_dangerously flag to manager and use this flag to
determine if a configuation file outside of AST_CONFIG_DIR
should be read.

ASTERISK-30176

Change-Id: I46b26af4047433b49ae5c8a85cb8cda806a07404
This commit is contained in:
Mike Bradeen
2022-10-03 12:54:40 -06:00
committed by Benjamin Keith Ford
parent 9d74efa30f
commit 2285ffd5eb
5 changed files with 70 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
doc/UPGRADE-staging/manager_config_live_dangerously.txt Normal file
View File

@@ -0,0 +1,8 @@
Subject: AMI (Asterisk Manager Interface)
Previously, GetConfig and UpdateConfig were able to access files outside of
the Asterisk configuration directory. Now this access is put behind the
live_dangerously configuration option in asterisk.conf, which is disabled by
default. If access to configuration files outside of the Asterisk configuation
directory is required via AMI, then the live_dangerously configuration option
must be set to yes.