[kepler-dev] [Bug 5065] In shared or administrative installations, the ability to store modules.txt and extra modules locally. This way, the module manager will work smoothly on Windows without having to run as an administrator.

bugzilla-daemon at ecoinformatics.org bugzilla-daemon at ecoinformatics.org
Thu Jul 29 17:41:06 PDT 2010


http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5065

Matt Jones <jones at nceas.ucsb.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jones at nceas.ucsb.edu

--- Comment #2 from Matt Jones <jones at nceas.ucsb.edu> 2010-07-29 17:41:05 PDT ---
Running as administrator or other root-level accounts is likely to be a
security issue, as it allows escalation  of privileges if Kepler is compromised
-- or possibly even if it is used as intended to run workflows that, for
example, launch command shells.  So, I think it best if Kepler only runs as a
non-admin user.  The easiest solution to this problem is simply to store any
files that a user needs to write to in a user-writable directory, probably as a
subdirectory of KeplerData in their home directory.

-- 
Configure bugmail: http://bugzilla.ecoinformatics.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the Kepler-dev mailing list