Page 1 of 1

[RESOLVED] Access the entire file system

Posted: Sat Jul 06, 2024 7:46 pm
by Greg_Talyor
I have v1.37.61 with all default settings (me think). I can use,

Code: Select all

https://host/zm/index.php?view=files&path=/
to access the entire file system. Is there a setting to limit access to /var/cache/zoneminder/ only? Or do I need to restrict access to user www-data by setting the right file permissions myself? If the latter, which directories Zoneminder has to have read only and read/write accesses in its normal operation?

Ta.

Re: Access the entire file system

Posted: Sat Jul 06, 2024 9:24 pm
by iconnor
ZM is supposed to only access paths defined as storage areas... could be a bug though.

Re: Access the entire file system

Posted: Sat Jul 06, 2024 9:53 pm
by iconnor
Turns out it didn't. Does now. See 1.37.62

Re: Access the entire file system

Posted: Sun Jul 07, 2024 3:09 pm
by Greg_Talyor
v1.37.62 resolves the problem. Many thanks. Ta