+1

2024년 4월 30일 (화) 오후 11:45, Jongyoul Lee <jongy...@gmail.com>님이 작성:

> Hello Nathan,
>
> Thank you for the reply. We already talked about what you mentioned in the
> discussion thread I attached in the first email. Moreover, Zeppelin already
> provides a way to disable the Shell interpreter so you can disable it even
> though releases include the Shell interpreter.
>
> Best regards,
> Jongyoul Lee
>
> 2024년 4월 30일 (화) 오후 10:52, Rutland, Nathan (CTR) <
> nathan.rutl...@mail.associates.cisa.dhs.gov>님이 작성:
>
>> My reason for removing shell interpreter is that one can easily do:
>>
>>
>>
>> %sh
>>
>> cat /etc/zeppelin/conf/shiro.ini
>>
>>
>>
>> This would expose all the passwords in a normal system.  I have been
>> trying to disable sh interpreter ahead of this feature without great
>> success.
>>
>>
>>
>> *From:* Jongyoul Lee <jongy...@gmail.com>
>> *Sent:* Monday, April 29, 2024 7:30 PM
>> *To:* Rutland, Nathan (CTR) <nathan.rutl...@mail.associates.cisa.dhs.gov>
>> *Cc:* dev <d...@zeppelin.apache.org>; users <users@zeppelin.apache.org>
>> *Subject:* Re: [VOTE] Revert Shell Interpreter
>>
>>
>>
>> *CAUTION: *This email originated from outside of CISA/DHS. DO NOT click
>> links or open attachments unless you recognize and/or trust the sender.
>> Contact your component SOC with questions or concerns.
>>
>>
>>
>> Hello,
>>
>>
>>
>> I planed to complete this vote today following general rules for Apache
>> Zeppelin community history but I prolong this vote to one day more as we
>> have one veto so that we wait for the reason.
>>
>>
>>
>> Best regards,
>>
>> Jongyoul Lee
>>
>>
>>
>> 2024년 4월 30일 (화) 오전 9:24, Jongyoul Lee <jongy...@gmail.com>님이 작성:
>>
>> Hello Nathan,
>>
>>
>>
>> Thank you for interests for this issue.
>>
>>
>>
>> By the way, I should have explained but all voter who gave -1 need to
>> leave some comments about why they disagree this vote. It's the voting
>> policy for all apache projects.[1]
>>
>>
>>
>> Best regards,
>>
>> Jongyoul Lee
>>
>>
>>
>> [1] https://www.apache.org/foundation/voting.html#Veto
>> <https://urldefense.us/v3/__https:/www.apache.org/foundation/voting.html*Veto__;Iw!!BClRuOV5cvtbuNI!ADJCW-K2BWvFLcKduDDrZuDLcY_SnFpwZ1uA4DyNLIW8eXGx07SMJu23ydDmlrhAAX1t6bRpjnuThKFYhfoL1-aEtyirt5sktEur$>
>>
>>
>>
>> 2024년 4월 30일 (화) 오전 2:36, Rutland, Nathan (CTR) <
>> nathan.rutl...@mail.associates.cisa.dhs.gov>님이 작성:
>>
>> -1
>>
>>
>>
>> *From:* Jongyoul Lee <jongy...@gmail.com>
>> *Sent:* Saturday, April 27, 2024 7:21 AM
>> *To:* users <users@zeppelin.apache.org>; dev <d...@zeppelin.apache.org>
>> *Subject:* [VOTE] Revert Shell Interpreter
>>
>>
>>
>> *CAUTION: *This email originated from outside of CISA/DHS. DO NOT click
>> links or open attachments unless you recognize and/or trust the sender.
>> Contact your component SOC with questions or concerns.
>>
>>
>>
>> Hello community,
>>
>>
>>
>> I propose the vote for reverting Shell interpreter.
>>
>>
>>
>> Please check the discussion thread[1] before you participate in this vote.
>>
>>
>>
>> [] +1 Including Shell interpreter again in the next Zeppelin release
>>
>> [] 0 no opinion
>>
>> [] -1 Removing Shell interpreter in the next Zeppelin release as it is
>>
>>
>>
>> Best regards,
>>
>> Jongyoul Lee
>>
>>
>>
>> [1] https://lists.apache.org/thread/opf3h6b0wc4pnsvqsy0b50vzmozd9qbn
>> <https://urldefense.us/v3/__https:/lists.apache.org/thread/opf3h6b0wc4pnsvqsy0b50vzmozd9qbn__;!!BClRuOV5cvtbuNI!CtFUaJ9Py5GaMHmEN0yaMqbSrwRW7L2PzpnNIa2VEqCR9uhwd_ZtcD22qIG35Lls05f8The9HpIROCcowJlxkv_SASaxvJF9qXI-$>
>>
>>
>
> --
> Best regards,
> Jongyoul Lee
>


-- 
Best regards,
Jongyoul Lee

Reply via email to