[RESOLVED] Access the entire file system

[Greg_Talyor]

I have v1.37.61 with all default settings (me think). I can use,

Code: Select all

https://host/zm/index.php?view=files&path=/

to access the entire file system. Is there a setting to limit access to /var/cache/zoneminder/ only? Or do I need to restrict access to user www-data by setting the right file permissions myself? If the latter, which directories Zoneminder has to have read only and read/write accesses in its normal operation?

Ta.

[iconnor]

ZM is supposed to only access paths defined as storage areas... could be a bug though.

[iconnor]

Turns out it didn't. Does now. See 1.37.62

[Greg_Talyor]

v1.37.62 resolves the problem. Many thanks. Ta