Project

General

Profile

Actions

User story #8607

closed

Document security level of Rudder content

Added by Alexis Mousset over 8 years ago. Updated over 5 years ago.

Status:
Released
Priority:
N/A
Category:
Documentation
Target version:
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Fix check:
Regression:

Description

  • What is accessible from who? From where?
  • What is encrypted? When?
  • Directive and 50_techniques are private, and always encrypted/root-readable only
  • The rudder group can give access to private data
  • All the rest (tools, ncf/common, etc.) should be considered "public", and may even be readable from non accepted hosts (ncf)
  • Shared files?

Related issues 2 (0 open2 closed)

Related to Rudder - Bug #8503: Files in /var/local/rudder/ncf are world readableReleasedAlexis MoussetActions
Related to Rudder - Bug #8159: Do not backup modified promise files and encrypt ncf/local transferReleasedNicolas CHARLES2016-04-07Actions
Actions #1

Updated by Alexis Mousset over 8 years ago

  • Related to Bug #8503: Files in /var/local/rudder/ncf are world readable added
Actions #2

Updated by Alexis Mousset over 8 years ago

  • Related to Bug #8159: Do not backup modified promise files and encrypt ncf/local transfer added
Actions #3

Updated by Alexis Mousset over 8 years ago

  • Status changed from New to In progress
Actions #4

Updated by Alexis Mousset over 8 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis Mousset to Jonathan CLARKE
  • Pull Request set to https://github.com/Normation/rudder-doc/pull/202
Actions #5

Updated by François ARMAND over 8 years ago

  • Assignee changed from Jonathan CLARKE to François ARMAND
Actions #6

Updated by Alexis Mousset over 8 years ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100
Actions #7

Updated by Alexis Mousset over 8 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 2.11.23, 3.1.12 and 3.2.5 which were released today.

Actions #8

Updated by Vincent MEMBRÉ over 5 years ago

  • Private changed from Yes to No
Actions

Also available in: Atom PDF