Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#66820 - [gitlab] gitlab_workhorse_secret should not be packaged
Attached to Project:
Community Packages
Opened by Jakub Klinkovský (lahwaacz) - Friday, 29 May 2020, 08:53 GMT
Last edited by Anatol Pomozov (anatolik) - Friday, 05 June 2020, 18:15 GMT
Opened by Jakub Klinkovský (lahwaacz) - Friday, 29 May 2020, 08:53 GMT
Last edited by Anatol Pomozov (anatolik) - Friday, 05 June 2020, 18:15 GMT
|
DetailsThe package contains /etc/webapps/gitlab/gitlab_workhorse_secret with a fixed string and it is not even in the backup() array. The secret string should be set by administrators, not by the package.
|
This task depends upon
Closed by Anatol Pomozov (anatolik)
Friday, 05 June 2020, 18:15 GMT
Reason for closing: Fixed
Additional comments about closing: 13.0.3
Friday, 05 June 2020, 18:15 GMT
Reason for closing: Fixed
Additional comments about closing: 13.0.3
I am going to remove /etc/webapps/gitlab/gitlab_workhorse_secret from the package. A fix is coming with 13.0.3.