Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update check-running.asciidoc #90577

Closed
wants to merge 1 commit into from
Closed

Update check-running.asciidoc #90577

wants to merge 1 commit into from

Conversation

aztazt
Copy link

@aztazt aztazt commented Oct 1, 2022

needs sudo permissions I guess, otherwise /etc/elasticsearch/certs is not accessible

needs sudo permissions I guess, otherwise /etc/elasticsearch/certs is not accessible
@elasticsearchmachine elasticsearchmachine added v8.4.4 needs:triage Requires assignment of a team area label external-contributor Pull request authored by a developer outside the Elasticsearch team labels Oct 1, 2022
@stu-elastic
Copy link
Contributor

We shouldn't recommend running curl as root. Does certs not have o+x? Tagging security but could be core/infra for distribution/packages/src/common/scripts/postinst

@stu-elastic stu-elastic added :Security/Security Security issues without another label and removed needs:triage Requires assignment of a team area label labels Oct 3, 2022
@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Oct 3, 2022
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@ywangd
Copy link
Member

ywangd commented Oct 4, 2022

@aztazt Thank you for your interest in Elasticseearch.

It is a bug that reading http_ca.crt file requires higher privilege and is tracked at #87862. While your change fix the symptom, we would prefer to address the underlying issue.

We really appreciate your interest in contributing to Elasticsearch and hope you make more contributions in the future, however in this case we have taken the decision to close this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external-contributor Pull request authored by a developer outside the Elasticsearch team :Security/Security Security issues without another label Team:Security Meta label for security team v8.4.4
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants