On 11/21/2011 11:04 AM, Richard Su wrote:
We don't want to include the secret_token.rb file in our rpms
because
it becomes a security hole if people end up using it in production.
A companion configure patch is on list to regenerate a new token each
time aeolus-configure is executed.
---
aeolus-conductor.spec.in | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/aeolus-conductor.spec.in b/aeolus-conductor.spec.in
index 6db6480..b40f479 100644
--- a/aeolus-conductor.spec.in
+++ b/aeolus-conductor.spec.in
@@ -178,6 +178,7 @@ for filetype in builder css feature gif haml html ico jpg js json key
opts png \
%{__cp} src/$dir/*.$filetype %{buildroot}%{app_root}/$dir
done
done
+%{__rm} %{buildroot}%{app_root}/config/initializers/secret_token.rb
# precompile stylesheets
%{__mkdir} %{buildroot}%{app_root}/public/stylesheets/compiled
Self ack and
pushed.