A more secure root-wrapper alternative

Code Issues Proposed changes

Alternative to using a sudoers file to limit which commands can be run as
root in Nova. This one makes use of command filters defined in Nova code
itself, which can be customized to deeply inspect command arguments before
allowing a command to be executed.
This change puts the infrastructure in place, together with command filters
that replicate the level of filtering provided by a sudoers file (no deep
argument inspection yet). An example of an advanced filter (RegExpFilter) is
also provided. This new root wrapper is not active by default (root_helper
still defaults to "sudo"). Implements blueprint nova-rootwrap.
Change-Id: I7ad723b55e9446758876f21b4fbb09374a910425

This commit is contained in:

Thierry Carrez

2011年11月21日 16:28:02 +01:00

parent 45e31ab90d

commit 3c87de7c12

9 changed files with 583 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1
setup.py

View File

@@ -104,6 +104,7 @@ setup(name='nova',

'bin/nova-manage',

'bin/nova-network',

'bin/nova-objectstore',

'bin/nova-rootwrap',

'bin/nova-scheduler',

'bin/nova-spoolsentry',

'bin/stack',

A more secure root-wrapper alternative

1 setup.py Unescape Escape View File

1
setup.py

View File