Project

General

Profile

Actions
Copy link

Bug #29254

open

Prevent creating techniques with an id that will break the agent

Bug #29254: Prevent creating techniques with an id that will break the agent

Added by Alexis Mousset 3 months ago. Updated 4 days ago.

Status:
New
Priority:
2
Assignee:
Alexis Mousset
Category:
Web - Technique editor
Target version:
9.0.11
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

We currently allow for example to create a technique with the rudder id, breaking the global parameters definition. We should also prevent node, etc.

Files

list-techniqueid (5.13 KB) list-techniqueid Alexis Mousset, 2026-07-15 11:31

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #1

  • Priority changed from N/A to To review

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #3

  • File cfengine-variable-prefixes.txt added

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #4

  • File deleted (cfengine-variable-prefixes.txt)

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #5

  • File list-techniqueid added

Updated by Alexis Mousset 3 months ago · Edited Actions
Copy link
 #6

We need to forbid:

  • the ids of existing techniques
  • the ids of the methods
  • everything starting with rudder_ or _rudder_ as it the conventional prefix in techniques and will reserve names for future bundles
  • a list of hardcoded values.

The hardcoded values are:

  • the CFEngine system prefixes
const
def
edit
match
mon
sys
this
  • the rudder data prefixes
audit_from_osquery_var
call_method_data
dry_run_unique
flag_unique
method_id_unique
ncf_flags
node
report_data
rudder
vault
  • the current bundle names in techniques + lib (minus methods), cf. attached file

Forbid here can mean "auto add a counter as suffix".

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #7

  • Subject changed from Prevent creating techniques with technique id equal to a prefix used in system variables to Prevent creating techniques with an id that will break the agent

Updated by Alexis Mousset 3 months ago Actions
Copy link
 #8

  • File deleted (list-techniqueid)

Updated by Nicolas CHARLES 3 months ago Actions
Copy link
 #10

  • Assignee set to Alexis Mousset
  • Priority changed from To review to 2

As a workaround, you can clone the offending technique, give it a different name, and destroy the older technique

Updated by Alexis Mousset 2 months ago Actions
Copy link
 #11

  • Target version changed from 9.0.9 to 9.0.10

Updated by Vincent MEMBRÉ 4 days ago Actions
Copy link
 #12

  • Target version changed from 9.0.10 to 9.0.11
Actions
Copy link

Also available in: PDF Atom