[Bug 941] New: security: pmproxy needs outbound acl

[bugzilla-daemon@xxxxxxxxxxx]

Bug ID	941
Summary	security: pmproxy needs outbound acl
Product	pcp
Version	unspecified
Hardware	All
OS	Linux
Status	NEW
Severity	normal
Priority	P5
Component	pcp
Assignee	mort@sgi.com
Reporter	fche@redhat.com
CC	pcp@oss.sgi.com
Classification	Unclassified

With pmproxy (and pmwebd in the future), there is a risk of letting the proxy
server be used as a scanning tool for an internal network, by e.g. having
someone request arbitrary hosts & port-numbers for putative-pcp connections. 
Until we have a proper client-authentication scheme (and probably even after),
pmproxy & pmwebd should have a facility to restrict the permitted outbound
connections.  This could use an ACL file kind of like pmcd, though it needs to
be more picky w.r.t. port numbers.

---

      You are receiving this mail because:

• You are on the CC list for the bug.