|
|
- From 07ccb48add8c8cb0dd8a0f7d3f4994866d0ef32e Mon Sep 17 00:00:00 2001
- From: Willy Tarreau <w@1wt.eu>
- Date: Thu, 26 Nov 2015 18:32:39 +0100
- Subject: [PATCH 08/10] BUG/MEDIUM: cli: changing compression rate-limiting
- must require admin level
-
- Right now it's possible to change the global compression rate limiting
- without the CLI being at the admin level.
-
- This fix must be backported to 1.6 and 1.5.
- (cherry picked from commit a1c2b2c4f3e65d198a0a4b25a4f655f7b307a855)
- (cherry picked from commit 9e5f1489c9f2d6926729890f249f7ebb9d3bfd43)
- ---
- src/dumpstats.c | 6 ++++++
- 1 file changed, 6 insertions(+)
-
- diff --git a/src/dumpstats.c b/src/dumpstats.c
- index b4be2cd..b1bbf31 100644
- --- a/src/dumpstats.c
- +++ b/src/dumpstats.c
- @@ -1695,6 +1695,12 @@ static int stats_sock_parse_request(struct stream_interface *si, char *line)
- if (strcmp(args[3], "global") == 0) {
- int v;
-
- + if (s->listener->bind_conf->level < ACCESS_LVL_ADMIN) {
- + appctx->ctx.cli.msg = stats_permission_denied_msg;
- + appctx->st0 = STAT_CLI_PRINT;
- + return 1;
- + }
- +
- if (!*args[4]) {
- appctx->ctx.cli.msg = "Expects a maximum input byte rate in kB/s.\n";
- appctx->st0 = STAT_CLI_PRINT;
- --
- 2.4.10
-
|
