This patch adds kernel command line argument: 'insecure_installation'
as a flag that user can set to 1 to allow some operations that aren't
normally allowed due to security concerns. This is disabled by default
and it is up to the user to the ensure security when this options is
enabled.
This patch also disables by default download of ks_config file from non-HTTPS
sources.
Following cases can arise:
i) insecure_installation=1 passed as kernel param in cmdline
insecure_installation key if present in ks_config ignored
ks_config and rpms from untrusted sources -> allowed
ii) insecure_installation=0 passed as kernel param in cmdline
insecure_installation key if present in ks_config ignored
ks_config and rpms from untrusted sources -> not allowed
iii) insecure_installation not passed as kernel param in cmdline
insecure_installation: true passed in ks_config
ks_config from http -> not allowed
rpms from untrusted sources -> allowed
iv) insecure_installation not passed as kernel param in cmdline
insecure_installation: false passed in ks_config
This patch adds kernel command line argument: 'insecure_installation' as a flag that user can set to 1 to allow some operations that aren't normally allowed due to security concerns. This is disabled by default and it is up to the user to the ensure security when this options is enabled.
This patch also disables by default download of ks_config file from non-HTTPS sources.
Following cases can arise: i) insecure_installation=1 passed as kernel param in cmdline insecure_installation key if present in ks_config ignored