service accepting commands from the network by default

Zbigniew Jędrzejewski-Szmek zbyszek at in.waw.pl
Mon Feb 23 14:34:34 UTC 2015


On Mon, Feb 23, 2015 at 09:16:48AM +0800, Christopher Meng wrote:
> Elasticsearch was never safe:
> 
> http://www.elasticsearch.org/community/security/
> https://bugzilla.redhat.com/show_bug.cgi?id=1124252
> 
> So it shouldn't go ahead in current status.

Thanks to everyone for their comments. Elasticsearch has now been modified to
listen on localhost only.

Zbyszek


More information about the devel mailing list