mirror of
https://github.com/amidaware/tacticalrmm.git
synced 2026-04-26 15:05:57 +03:00
[GH-ISSUE #1680] Feature Request: Prevent unauthenticated downloads of meshagent from MeshCentral #2997
Labels
No labels
In Process
bug
bug
dev-triage
documentation
duplicate
enhancement
fixed
good first issue
help wanted
integration
invalid
pull-request
question
requires agent update
security
ui tweak
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tacticalrmm#2997
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @NiceGuyIT on GitHub (Nov 15, 2023).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1680
Is your feature request related to a problem? Please describe.
This is related to issue Ylianst/MeshCentral#5554. I would like prevent unauthenticated downloads of
meshagentfrom MeshCentral. The current configuration allows unauthenticated downloads of themeshagentfrom MeshCentral. Adding"lockagentdownload": trueto the MeshCentralconfig.jsonprevents unauthenticated downloads. I don't have the means to test this config in dev because I don't have code signing and I have only Linux/macOS in dev.Describe the solution you'd like
I would like to add a little more security to MeshCentral by preventing unauthenticated downloads of the agent.
Describe alternatives you've considered
N/A
Additional context
See this comment for the exact config.