Prevent ALL access to $SYS from outside localhost.

The structure of $SYS is pretty well known or can be guessed and can contain non-public information and therefore should be protected.
This commit is contained in:
Martin Rauscher 2015-04-26 18:03:06 +02:00
parent 6cc7f63c2b
commit 94dfa95419
1 changed files with 1 additions and 1 deletions

View File

@ -20,7 +20,7 @@
{allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}. {allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}.
{deny, all, subscribe, [{eq, "$SYS/#"}, {eq, "#"}]}. {deny, all, subscribe, ["$SYS/#", {eq, "#"}]}.
{allow, all}. {allow, all}.