cloudstack

apache/cloudstack

Fork 0

mirror of https://github.com/apache/cloudstack.git synced 2025-11-03 04:12:31 +01:00

Commit Graph

Author	SHA1	Message	Date
John Kinsella	45e4d4fc3b	Summary: Updated sudoers approved commands for cloud user Detail: Previously the cloud user has full password-less sudo access. This commit changes that to only allow access to a specific list of commands. Been tested in production on ACS 4.0 and 4.2 mangement servers. BUG-ID: CLOUDSTACK-967 Bugfix-for: Reviewed-by: Reported-by: Signed-off-by: John Kinsella <jlk@stratosec.co> 1382560936 -0700	2013-10-23 13:42:16 -07:00
Wido den Hollander	fa1e9a24a6	conf: Add a @ so @MSUSER@ is replaced by "cloud"	2013-04-03 16:54:00 +02:00
Wido den Hollander	41e3db39c3	debian: Package ulimits and sudo rules The old packages used to write this data to the configuration in a postinst file. That was horrible to track since system administrators had no idea what was going on.	2013-03-14 15:55:32 +01:00

Author

SHA1

Message

Date

John Kinsella

45e4d4fc3b

Summary: Updated sudoers approved commands for cloud user

Detail: Previously the cloud user has full password-less sudo access.
This commit changes that to only allow access to a specific list of
commands. Been tested in production on ACS 4.0 and 4.2 mangement servers.

BUG-ID: CLOUDSTACK-967
Bugfix-for:
Reviewed-by:
Reported-by:
Signed-off-by: John Kinsella <jlk@stratosec.co> 1382560936 -0700

2013-10-23 13:42:16 -07:00

Wido den Hollander

fa1e9a24a6

conf: Add a @ so @MSUSER@ is replaced by "cloud"

2013-04-03 16:54:00 +02:00

Wido den Hollander

41e3db39c3

debian: Package ulimits and sudo rules

The old packages used to write this data to the configuration
in a postinst file.

That was horrible to track since system administrators had no
idea what was going on.

2013-03-14 15:55:32 +01:00

3 Commits