run-as-hook needs to require the target unit agent to be local

Bug #1006277 reported by Clint Byrum
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju-jitsu
New
Undecided
Unassigned

Bug Description

There is some concern that a destructive script might be run using 'jitsu run-as-hook'. Something like this:

rm -rf `jitsu run-as-hook data-service/1 config-get my-service-data-dir`

And then if that is run on your local machine it might end up wiping out / because data-service/1 says its on / on its cloud node, but you are running it on your client.

We should verify that the local unit agent is available before letting this run. That would at least keep this problem from happening.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.