lp:~ubuntubmw/+junk/add_key-fix

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #436977: euca_rootwrap makes eucalyptus user equivalent to root

Undecided

Confirmed

Link a bug report

Related blueprints

1272. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

add apparmor profiles

these can be used to limit what the eucalyptus user can do as root

1271. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

do not run virsh as root

this works only if care is taken that
libvirtd accepts connections from the eucalyptus user.
e.g. by using this snippet in the packaging post-install script

lv=/etc/libvirt/libvirtd.conf
if ! grep -q '^ *unix_sock_group *= *"eucalyptus"' $lv ; then
  echo 'unix_sock_group = "eucalyptus"' >> $lv
  echo 'unix_sock_rw_perms = "0770"' >> $lv
  echo 'auth_unix_rw = "none"' >> $lv
  insserv libvirtd
  /etc/init.d/libvirtd restart
fi

1270. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-28

install necessary untaint.pm

1269. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

avoid unneeded root privs

cleanup using EUCALYPTUS_ROOTWRAP
drop duplicate EUCALYPTUS_ROOTWRAP def

1268. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

cleanup; avoid bash

1267. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; use constant; fix untaint

1266. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; cleanup

1265. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict; cleanup

ignore comment lines in input

1264. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

use strict

1263. By Bernhard Wiedemann <bwiedemann@bernhard> on 2011-01-26

drop root privs in partition2disk