Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-15579

Jfrog Artifactory permissions in RPM package

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Open
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Security

      Description

      Hi!

      Checking inside the Jfrog Artifactory RPM file shows that all the files and directories permissions are like 0775 and 0664 or even more world-readable. Maybe it is a good idea to tighten the permissions a little bit, because I really don't see any reason why the files permissions should be so wide-open for all users.

      Example:

      1. rpm -qplv jfrog-artifactory-pro-5.8.0.rpm
        -rwxrwxr-x 1 root root 9194 Jan 1 21:16 /etc/init.d/artifactory
        drwxr-xr-x 2 root root 0 Jan 1 21:16 /etc/opt/jfrog/artifactory
        rwxrwx-- 1 root root 11024 Jan 1 21:16 /etc/opt/jfrog/artifactory/artifactory.config.xml
        rwxrwx-- 1 root root 12433 Jan 1 21:16 /etc/opt/jfrog/artifactory/artifactory.system.properties
        rwxrwx-- 1 root root 1145 Jan 1 21:16 /etc/opt/jfrog/artifactory/binarystore.xml
        rwxrwx-- 1 root root 632 Jan 1 21:16 /etc/opt/jfrog/artifactory/default
        rwxrwx-- 1 root root 11955 Jan 1 21:16 /etc/opt/jfrog/artifactory/logback.xml
        rwxrwx-- 1 root root 5628 Jan 1 21:16 /etc/opt/jfrog/artifactory/mimetypes.xml
        drwxr-xr-x 2 root root 0 Jan 1 21:16 /opt/jfrog/artifactory
        drwxrwxr-x 2 root root 0 Jan 1 21:16 /opt/jfrog/artifactory/bin
        -rwxrwxr-x 1 root root 103424 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactory-service.exe
        -rwxrwxr-x 1 root root 1956 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactory.bat
        -rwxrwxr-x 1 root root 632 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactory.default
        -rwxrwxr-x 1 root root 5542 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactory.sh
        -rwxrwxr-x 1 root root 8800 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactoryManage.sh
        -rwxrwxr-x 1 root root 382 Jan 1 21:16 /opt/jfrog/artifactory/bin/artifactoryctl
        -rwxrwxr-x 1 root root 8014 Jan 1 21:16 /opt/jfrog/artifactory/bin/configure.mysql.sh

      Best regards,

      Alo Eenmäe

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            alo.eenmae Alo Eenmäe
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: