| 2010-11-26 12:55:42 |
Thierry Carrez |
bug |
|
|
added bug |
| 2010-11-26 12:56:05 |
Thierry Carrez |
nova (Ubuntu): importance |
Undecided |
Wishlist |
|
| 2011-02-18 09:40:20 |
Thierry Carrez |
nova (Ubuntu): status |
New |
Confirmed |
|
| 2011-06-10 09:28:40 |
Thierry Carrez |
summary |
nova_sudoers is brittle, should use proper rootwrap |
nova_sudoers is brittle, often out of date, and too permissive |
|
| 2011-06-10 09:29:13 |
Thierry Carrez |
description |
Using /etc/sudoers.d/nova_sudoers is a bit brittle. For example, it makes nova utterly fail if your /etc/sudoers is missing #includedir /etc/sudoers.d.
It could be replaced by a proper root wrapper (like euca_rootwrap). |
1/ The current sudoers file is way too permissive. It gives access to so many unrestricted commands that the nova user is as powerful as the root user.
2/ The sudoers setup is a bit brittle because it assumes things about your /etc/sudoers ("must include /etc/sudoers.d").
3/ Whenever a code change in nova introduces the need for a new "sudo" command, the packages fail to introduce in parallel the needed change in the sudoers file, mainly because those are two separate code bases with two separate sets of developers working on it. |
|
| 2011-06-10 09:30:24 |
Dave Walker |
bug |
|
|
added subscriber Dave Walker |
| 2011-08-01 14:59:52 |
Thierry Carrez |
nova (Ubuntu): status |
Confirmed |
Triaged |
|
| 2011-08-01 14:59:52 |
Thierry Carrez |
nova (Ubuntu): assignee |
|
Thierry Carrez (ttx) |
|
| 2011-08-03 15:36:23 |
Thierry Carrez |
nova (Ubuntu): status |
Triaged |
In Progress |
|
| 2011-08-11 08:29:19 |
Dave Walker |
tags |
|
server-o-rs |
|
| 2011-08-19 08:25:05 |
Dave Walker |
tags |
server-o-rs |
|
|
| 2011-12-08 16:50:33 |
Thierry Carrez |
nova (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2012-01-04 19:44:34 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-server-dev/nova/essex |
|
| 2012-01-13 09:00:12 |
Launchpad Janitor |
nova (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2012-01-13 09:10:28 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/nova |
|
| 2012-01-13 13:31:27 |
Launchpad Janitor |
branch linked |
|
lp:~openstack-ubuntu-packagers/nova/ubuntu |
|
| 2013-01-22 16:06:46 |
Launchpad Janitor |
branch linked |
|
lp:~openstack-ubuntu-testing/nova/raring-grizzly |
|
