lp:~ubuntubmw/+junk/add_key-fix

Created by Bernhard M. Wiedemann on 2011-01-24 and last modified on 2011-01-31
Get this branch:
bzr branch lp:~ubuntubmw/+junk/add_key-fix
Only Bernhard M. Wiedemann can upload to this branch. If you are Bernhard M. Wiedemann please log in for upload directions.

Related bugs

Related blueprints

Branch information

Owner:
Bernhard M. Wiedemann
Review team:
Eucalyptus Maintainers
Status:
Development

Recent revisions

1272. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

add apparmor profiles

these can be used to limit what the eucalyptus user can do as root

1271. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

do not run virsh as root

this works only if care is taken that
libvirtd accepts connections from the eucalyptus user.
e.g. by using this snippet in the packaging post-install script

lv=/etc/libvirt/libvirtd.conf
if ! grep -q '^ *unix_sock_group *= *"eucalyptus"' $lv ; then
  echo 'unix_sock_group = "eucalyptus"' >> $lv
  echo 'unix_sock_rw_perms = "0770"' >> $lv
  echo 'auth_unix_rw = "none"' >> $lv
  insserv libvirtd
  /etc/init.d/libvirtd restart
fi

1270. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

install necessary untaint.pm

1269. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

avoid unneeded root privs

cleanup using EUCALYPTUS_ROOTWRAP
drop duplicate EUCALYPTUS_ROOTWRAP def

1268. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

cleanup; avoid bash

1267. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; use constant; fix untaint

1266. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; cleanup

1265. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; cleanup

ignore comment lines in input

1264. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict

1263. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

drop root privs in partition2disk

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar pack repository format 1 (needs bzr 0.92)
This branch contains Public information 
Everyone can see this information.