cockpit-navigator icon indicating copy to clipboard operation
cockpit-navigator copied to clipboard
verified publisher icon 45Drives

Regular user gain full access through Navigator.

Open Sekenenz opened this issue 3 years ago • 1 comments

Bug Info

Describe the bug While testing I've noticed that any regular user (even without any permissions) can login to web console and navigate (Navigator) through the whole system with full permissions.

To Reproduce

  1. Add a new user
  2. Login to web console
  3. Use Navigator

Expected behavior Browsing limited to user's folder.

Client Side

Desktop (please complete the following information):

  • OS: [MacOS Catalina]
  • Browser [chrome 108.0.5359.71]
  • Version [10.15.7]

Server Side

  • OS: [Debian 11]
  • Cockpit Version: [282-1~bpo11+1]

Sekenenz avatar Jan 05 '23 20:01 Sekenenz

needs more data, i just tested it and it doesnt work

maybe its improper setup? check the filesystem permissions and make sure you dont hit this button to get root privileges image it looks like this once you have root privliges image

lever1209 avatar Jan 22 '23 18:01 lever1209