# Security limitations in 2.5.2 exec binding

**URL:** <https://community.openhab.org/t/security-limitations-in-2-5-2-exec-binding/93191>\
**Category:** Bindings\
**Tags:** exec\
**Created:** [February 20, 2020, 7:47am UTC](https://community.openhab.org/t/security-limitations-in-2-5-2-exec-binding/93191 "2020-02-20T07:47:20Z")\
**Posts on this page:** 1\
**Showing post:** 29

<div class="post-metadata">

**Author:** ![shutterfreak](https://community.openhab.org/user_avatar/community.openhab.org/shutterfreak/32/74067_2.png) [@shutterfreak](https://community.openhab.org/u/shutterfreak)\
**Post date:** [February 20, 2020, 4:28pm UTC](https://community.openhab.org/t/security-limitations-in-2-5-2-exec-binding/93191/29 "2020-02-20T16:28:02Z")

</div>

> [@openHAB 2.5.x Patch Releases](https://community.openhab.org/t/openhab-2-5-x-patch-releases/90248/58):
>
> **IMPORTANT NOTICE TO USERS OF THE EXEC BINDING:**  
> Due to [this security advisory](https://github.com/openhab/openhab-addons/security/advisories/GHSA-w698-693g-23hv), the exec binding requires to have a whitelist of allowed commands to execute. Note that when updating the exec binding to version 2.5.2, it will stop functioning until you provide such a whitelist. Please see the [binding documentation](https://github.com/openhab/openhab-addons/blob/2.5.x/bundles/org.openhab.binding.exec/README.md#binding-configuration) for details.

The documentation doesn’t tell exactly where the file `misc/exec.whitelist` should be located.

Is it supposed to be `$OPENHAB_CONF/misc/exec.whitelist` ?

**EDIT** : it appears it is indeeed `$OPENHAB_CONF/misc/exec.whitelist`.

---

_[View the full topic](https://community.openhab.org/t/security-limitations-in-2-5-2-exec-binding/93191)._