Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
2.1.1
-
None
Description
Currently one can specify the proxy.config.admin.user_id=root making the trafficserver to serve all pages under root account.
Check the user_id provided making sure it's uid isn't zero.
Specifying -DBIG_SECURITY_HOLE at build time overrides that check.