Fix information leak on agg service status for ns-limited users

The daemon_status handler did not filter the monitor.services dataset.
opensvc · Jul 9, 2019 · 0ccdf0f · 0ccdf0f
1 parent b4f0c06
commit 0ccdf0f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/osvcd_mon.py b/lib/osvcd_mon.py
@@ -3430,7 +3430,8 @@ def get_all_paths(self):
 
     def get_agg_services(self, paths=None):
         data = {}
-        paths = self.get_all_paths()
+        if paths is None:
+            paths = self.get_all_paths()
         for path in paths:
             try:
                 if self.get_service(path).topology == "span":