lp://staging/~ubuntubmw/+junk/add_key-fix
Created by
Bernhard M. Wiedemann
and last modified
- Get this branch:
- bzr branch lp://staging/~ubuntubmw/+junk/add_key-fix
Only
Bernhard M. Wiedemann
can upload to this branch. If you are
Bernhard M. Wiedemann
please log in for upload directions.
Related bugs
Bug #436977: euca_rootwrap makes eucalyptus user equivalent to root | Undecided | Confirmed |
Related blueprints
Branch information
Recent revisions
- 1272. By Bernhard Wiedemann <bwiedemann@bernhard>
-
add apparmor profiles
these can be used to limit what the eucalyptus user can do as root
- 1271. By Bernhard Wiedemann <bwiedemann@bernhard>
-
do not run virsh as root
this works only if care is taken that
libvirtd accepts connections from the eucalyptus user.
e.g. by using this snippet in the packaging post-install scriptlv=/etc/
libvirt/ libvirtd. conf
if ! grep -q '^ *unix_sock_group *= *"eucalyptus"' $lv ; then
echo 'unix_sock_group = "eucalyptus"' >> $lv
echo 'unix_sock_rw_perms = "0770"' >> $lv
echo 'auth_unix_rw = "none"' >> $lv
insserv libvirtd
/etc/init.d/ libvirtd restart
fi - 1269. By Bernhard Wiedemann <bwiedemann@bernhard>
-
avoid unneeded root privs
cleanup using EUCALYPTUS_ROOTWRAP
drop duplicate EUCALYPTUS_ROOTWRAP def
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar pack repository format 1 (needs bzr 0.92)