99bf4d0c42
This PR fixes a security issue where an IAM user based on his policy is granted more privileges than restricted by the users IAM policy. This is due to an issue of prefix based Matcher() function which was incorrectly matching prefix based on resource prefixes instead of exact match.
100 lines
4.2 KiB
Modula-2
100 lines
4.2 KiB
Modula-2
module github.com/minio/minio
|
|
|
|
go 1.12
|
|
|
|
require (
|
|
cloud.google.com/go v0.37.2
|
|
contrib.go.opencensus.io/exporter/ocagent v0.5.0 // indirect
|
|
github.com/Azure/azure-sdk-for-go v27.0.0+incompatible
|
|
github.com/Azure/go-autorest v11.7.0+incompatible
|
|
github.com/DataDog/zstd v1.4.0 // indirect
|
|
github.com/alecthomas/participle v0.2.1
|
|
github.com/aliyun/aliyun-oss-go-sdk v0.0.0-20190307165228-86c17b95fcd5
|
|
github.com/baiyubin/aliyun-sts-go-sdk v0.0.0-20180326062324-cfa1a18b161f // indirect
|
|
github.com/bcicen/jstream v0.0.0-20190220045926-16c1f8af81c2
|
|
github.com/cheggaaa/pb v1.0.28
|
|
github.com/coredns/coredns v1.4.0
|
|
github.com/coreos/bbolt v1.3.3 // indirect
|
|
github.com/coreos/etcd v3.3.12+incompatible
|
|
github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e // indirect
|
|
github.com/dgrijalva/jwt-go v3.2.0+incompatible
|
|
github.com/djherbis/atime v1.0.0
|
|
github.com/dnaeon/go-vcr v1.0.1 // indirect
|
|
github.com/dustin/go-humanize v1.0.0
|
|
github.com/eapache/go-resiliency v1.2.0 // indirect
|
|
github.com/eclipse/paho.mqtt.golang v1.1.2-0.20190322152051-20337d8c3947
|
|
github.com/elazarl/go-bindata-assetfs v1.0.0
|
|
github.com/fatih/color v1.7.0
|
|
github.com/fatih/structs v1.1.0
|
|
github.com/go-sql-driver/mysql v1.4.1
|
|
github.com/golang/snappy v0.0.1
|
|
github.com/gomodule/redigo v2.0.0+incompatible
|
|
github.com/gorilla/handlers v1.4.0
|
|
github.com/gorilla/mux v1.7.0
|
|
github.com/gorilla/rpc v1.2.0+incompatible
|
|
github.com/grpc-ecosystem/grpc-gateway v1.9.0 // indirect
|
|
github.com/hashicorp/go-rootcerts v1.0.1 // indirect
|
|
github.com/hashicorp/go-sockaddr v1.0.2 // indirect
|
|
github.com/hashicorp/go-uuid v1.0.1 // indirect
|
|
github.com/hashicorp/golang-lru v0.5.1 // indirect
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
|
github.com/hashicorp/raft v1.1.0 // indirect
|
|
github.com/hashicorp/vault v1.1.0
|
|
github.com/inconshreveable/go-update v0.0.0-20160112193335-8152e7eb6ccf
|
|
github.com/json-iterator/go v1.1.6
|
|
github.com/klauspost/compress v1.5.0 // indirect
|
|
github.com/klauspost/cpuid v1.2.1 // indirect
|
|
github.com/klauspost/pgzip v1.2.1
|
|
github.com/klauspost/readahead v1.3.0
|
|
github.com/klauspost/reedsolomon v1.9.1
|
|
github.com/lib/pq v1.0.0
|
|
github.com/marstr/guid v1.1.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.7
|
|
github.com/miekg/dns v1.1.8
|
|
github.com/minio/blazer v0.0.0-20171126203752-2081f5bf0465
|
|
github.com/minio/cli v1.20.0
|
|
github.com/minio/dsync v1.0.0
|
|
github.com/minio/hdfs/v3 v3.0.0
|
|
github.com/minio/highwayhash v1.0.0
|
|
github.com/minio/lsync v0.1.0
|
|
github.com/minio/mc v0.0.0-20190529152718-f4bb0b8850cb
|
|
github.com/minio/minio-go/v6 v6.0.29
|
|
github.com/minio/parquet-go v0.0.0-20190318185229-9d767baf1679
|
|
github.com/minio/sha256-simd v0.1.0
|
|
github.com/minio/sio v0.2.0
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.1 // indirect
|
|
github.com/nats-io/gnatsd v1.4.1 // indirect
|
|
github.com/nats-io/go-nats-streaming v0.4.4 // indirect
|
|
github.com/nats-io/nats-server v1.4.1 // indirect
|
|
github.com/nats-io/nats-streaming-server v0.14.2 // indirect
|
|
github.com/nats-io/nats.go v1.8.0
|
|
github.com/nats-io/stan.go v0.4.5
|
|
github.com/ncw/directio v1.0.5
|
|
github.com/nsqio/go-nsq v1.0.7
|
|
github.com/pkg/profile v1.3.0
|
|
github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829
|
|
github.com/rjeczalik/notify v0.9.2
|
|
github.com/rs/cors v1.6.0
|
|
github.com/ryanuber/go-glob v1.0.0 // indirect
|
|
github.com/satori/go.uuid v1.2.0 // indirect
|
|
github.com/segmentio/go-prompt v1.2.1-0.20161017233205-f0d19b6901ad
|
|
github.com/skyrings/skyring-common v0.0.0-20160929130248-d1c0bb1cbd5e
|
|
github.com/streadway/amqp v0.0.0-20190402114354-16ed540749f6
|
|
github.com/tidwall/gjson v1.2.1
|
|
github.com/tidwall/match v1.0.1 // indirect
|
|
github.com/tidwall/pretty v1.0.0 // indirect
|
|
github.com/tidwall/sjson v1.0.4
|
|
github.com/valyala/tcplisten v0.0.0-20161114210144-ceec8f93295a
|
|
go.etcd.io/bbolt v1.3.3 // indirect
|
|
go.uber.org/atomic v1.3.2
|
|
golang.org/x/crypto v0.0.0-20190611184440-5c40567a22f8
|
|
golang.org/x/net v0.0.0-20190611141213-3f473d35a33a // indirect
|
|
golang.org/x/sys v0.0.0-20190610200419-93c9922d18ae
|
|
google.golang.org/api v0.4.0
|
|
gopkg.in/Shopify/sarama.v1 v1.20.0
|
|
gopkg.in/olivere/elastic.v5 v5.0.80
|
|
gopkg.in/yaml.v2 v2.2.2
|
|
)
|