~ubuntubmw/+junk/add_key-fix : changes

~ubuntubmw/+junk/add_key-fix » Changes from revision 1272

From Revision 1272 to 1253

Rev	Summary	Authors	Date
1272	add apparmor profiles add apparmor profiles these can be used to limit what the eucalyptus user can do as root	Bernhard Wiedemann	13 years ago
1271	do not run virsh as root do not run virsh as root this works only if care is taken that libvirtd accepts connections from the eucalyptus user. e.g. by using this snippet in the packaging post-install script lv=/etc/libvirt/libvirtd.conf if ! grep -q '^ unix_sock_group = *"eucalyptus"' $lv ; then echo 'unix_sock_group = "eucalyptus"' >> $lv echo 'unix_sock_rw_perms = "0770"' >> $lv echo 'auth_unix_rw = "none"' >> $lv insserv libvirtd /etc/init.d/libvirtd restart fi	Bernhard Wiedemann	13 years ago
1270	install necessary untaint.pm install necessary untaint.pm	Bernhard Wiedemann	13 years ago
1269	avoid unneeded root privs avoid unneeded root privs cleanup using EUCALYPTUS_ROOTWRAP drop duplicate EUCALYPTUS_ROOTWRAP def	Bernhard Wiedemann	13 years ago
1268	cleanup; avoid bash cleanup; avoid bash	Bernhard Wiedemann	13 years ago
1267	use strict; use constant; fix untaint use strict; use constant; fix untaint	Bernhard Wiedemann	13 years ago
1266	use strict; cleanup use strict; cleanup	Bernhard Wiedemann	13 years ago
1265	use strict; cleanup use strict; cleanup ignore comment lines in input	Bernhard Wiedemann	13 years ago
1264	use strict use strict	Bernhard Wiedemann	13 years ago
1263	drop root privs in partition2disk drop root privs in partition2disk	Bernhard Wiedemann	13 years ago
1262	avoid using bash avoid using bash this changes tryrun to get an array-ref instead of a string use perl's rename instead of mv	Bernhard Wiedemann	13 years ago
1261	cleanup ; fix function prototypes cleanup ; fix function prototypes implement run using tryrun drop unused error param from tryrun drop useless untaint(``)	Bernhard Wiedemann	13 years ago
1260	use strict; cleanup use strict; cleanup	Bernhard Wiedemann	13 years ago
1259	rewrite to not use temp files rewrite to not use temp files	Bernhard Wiedemann	13 years ago
1258	use strict ; use untaint module use strict ; use untaint module	Bernhard Wiedemann	13 years ago
1257	use strict ; use untaint module use strict ; use untaint module	Bernhard Wiedemann	13 years ago
1256	avoid bash use avoid bash use this makes it easier to secure e.g. via apparmor	Bernhard Wiedemann	13 years ago
1255	fix local root exploit fix local root exploit add_key.pl is called by suid-root euca_rootwrap untaint function did allow most shell meta-characters by #-\@ range which is bad, because those strings were passed directly into "system" call which used bash in the previous notation.	Bernhard Wiedemann	13 years ago
1254	fix prototypes ; use perl mkdir/rmdir/chmod fix prototypes ; use perl mkdir/rmdir/chmod also set group on .ssh	Bernhard Wiedemann	13 years ago
1253	merging latest dev branch (see -n2). merging latest dev branch (see -n2).	Neil	13 years ago

Older »