Actions
Architecture #2432
closedWarn user if he inputs a "risky" value in a directive
Status:
Backlog
Priority:
N/A
Assignee:
-
Category:
Web - Config management
Target version:
Pull Request:
Effort required:
Name check:
Fix check:
Regression:
Description
At least on Debian/Ubuntu/CentOS, cron jobs in /etc/cron.{daily,hourly,monthly,weekly} are run by run-parts, which ignores filenames that contain a ".". To be exact, it's a regex like "[a-zA-Z0-9_-]+"
If neither the --lsbsysinit option nor the --regex option is given then the names must consist entirely of ASCII upper- and lower-case letters, ASCII digits, ASCII underscores, and ASCII minus-hyphens.
But on SLES run-parts isn't used, so I guess this is allowable...
Ideally, we should be able to display a warning in the user interface if a dangerous name is used.
Actions