@ccdm94

Re the 777 permissions on the UNIX socket created in server.py - I guess
it would make sense to allow the UNIX socket permissions to be hardened
to be more limited.  Seems like a desirable feature but I don't think
this code path is used in the scope of this MIR (cherrypy3).

I did a read through the cherrypy3 usage of cheroot and AFAICT all of
its usage of cheroot is via the network socket support rather than the
UNIX socket support (socket_host/port configuration options).


** Changed in: python-cheroot (Ubuntu)
       Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1930111

Title:
  [MIR] new dependencies of cherrypy3: jaraco.collections,
  jaraco.classes, jaraco.text, python-cheroot, python-jaraco.functools,
  python-tempora, python-portend, zc.lockfile

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cherrypy3/+bug/1930111/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to