[
https://issues.apache.org/jira/browse/KAFKA-14822?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17817089#comment-17817089
]
Mickael Maison commented on KAFKA-14822:
----------------------------------------
KIP-993:
https://cwiki.apache.org/confluence/display/KAFKA/KIP-993%3A+Allow+restricting+files+accessed+by+File+and+Directory+ConfigProviders
> Allow restricting File and Directory ConfigProviders to specific paths
> ----------------------------------------------------------------------
>
> Key: KAFKA-14822
> URL: https://issues.apache.org/jira/browse/KAFKA-14822
> Project: Kafka
> Issue Type: Improvement
> Reporter: Mickael Maison
> Assignee: Gantigmaa Selenge
> Priority: Major
> Labels: need-kip
> Fix For: 3.8.0
>
>
> In sensitive environments, it would be interesting to be able to restrict the
> files that can be accessed by the built-in configuration providers.
> For example:
> config.providers=directory
> config.providers.directory.class=org.apache.kafka.connect.configs.DirectoryConfigProvider
> config.providers.directory.path=/var/run
> Then if a caller tries to access another path, for example
> ssl.keystore.password=${directory:/etc/passwd:keystore-password}
> it would be rejected.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
