search

jonasbjurel / OPNFV-Playground

Playground for OPNFV
Apache License 2.0
3 stars 2 forks source link

DO NOT MERGE, WORK IN PROGRESS! Rewrite of the privilege escalation #22

Closed consultron closed 9 years ago

consultron commented 9 years ago

Instead of requring root to run the script, the script itself can be invoked by a non privileged user, and the script will invoke sudo when needed.

A local "sudo" script is added into tools and the script PATH is appended by this directory. The user password is now expected to reside in $HOME/.cipassword and the sudo proxy script will invoke sudo with this password.

jonasbjurel commented 9 years ago

Stefan, this is a great improvement. I think we should populate the root passwd file from install.sh for two reasons: 1) We can make sure that proper access rights are set. 2) Simplicity, so that people with little Linux knowledge can run this pipe-line. The only thing that may break is testing, I think none of the testing scripts should need root, but I do think I found out otherwise. But I will engage Jose to get testing working any way.

What are you waiting for, rebase and merge!

consultron commented 9 years ago

Hi,

There's still some testing needed before it's ready for merge - Monday!

/Stefan

jonasbjurel notifications@github.com skrev: (28 augusti 2015 18:50:12 CEST)

Stefan, this is a great improvement. I think we sold populate the root passwd file from install.sh for two reasons: 1) We can make sure that propper access rights are set. 2) Simplicity, so that people with little Linux knowledge can run this pipe-line. The only thing that may break is testing, I think none of the testing scripts should need root, but I do think I found out otherwise. But I will engage Jose to get testing working any way.

What are you waiting for, rebase and merge!

Reply to this email directly or view it on GitHub: https://github.com/jonasbjurel/OPNFV-Playground/pull/22#issuecomment-135830312

You can find my public key for PGP e-mail encryption at: https://www.consultron.com/AA2E09A9.pub.txt

consultron commented 9 years ago

OK, seems to work good enough - merging and keeping fingers crossed! :)