Re: [pcp] PMCD Access control question

[Lukas Berk <lberk@xxxxxxxxxx>]

Hi,

Chandana De Silva <chandana@xxxxxxxxxxxxx> writes:
[...]
> disallow ".*" : store;
> disallow ":*" : store;
> allow "local:*" : all;
>
> Does this mean that fetch is restricted to localhost, or is fetch
> allowed from anywhere. In other words is ".* fetch" the default ?
> I can currently access this particular host from any where, which
> suggests ".*" 

Fetch operations are not restricted to the localhost with this
configuation.  In cases where there is no specific allow or disallow
control statements applied to an operation (remote fetch's in this
case), the default is to allow it.  The first two lines disallow store
operation from any IPv4 and IPv6 address, and then the third overrides
that for the localhost case.

I would suggest taking a look at man pmcd(1) for more details,
specifically the 'Access Control Specification' section.

Cheers,

Lukas