fix: deny all subscribes to '#' topics in the default acl.conf

2022-06-09 10:46:09 +08:00 · 2022-06-09 10:46:09 +08:00 · f159e081fa
parent 174ea5291a
commit f159e081fa
1 changed files with 4 additions and 0 deletions
--- a/apps/emqx_authz/etc/acl.conf
+++ b/apps/emqx_authz/etc/acl.conf
@ -26,3 +26,7 @@
 {allow, {username, "^dashboard?"}, subscribe, ["$SYS/#"]}.

 {allow, {ipaddr, "127.0.0.1"}, all, ["$SYS/#", "#"]}.
+
+{deny, all, subscribe, ["$SYS/#", {eq, "#"}]}.
+
+{allow, all}.