This is an automatically generated e-mail. To reply, visit: http://reviewboard-openlmi.rhcloud.com/r/1924/

This change has been marked as submitted.


Review request for OpenLMI Developers.
By Jan Safranek.

Updated Úno. 16, 2015, 3:28 odp.

Repository: openlmi-storage

Description

Add polkit integration.

The polkit actions are taken from storaged and udisks, just with
org.openlmi.storage prefix. This allows us to experiment with existing
authorization schemes and identify problems in storaged and udisks.

The storage provider itself still runs as root, but is asks polkit
to authorize each action. Since polkit authorizes processes and not
users, we must spawn a little helper process under UID of the remote user
to check the authorization, see lmi.storage.util.polkit module. There is one
fork and several execs involved in each policy check.

Diffs

  • MANIFEST.in (6b6d42c5adb2ab59c8c9562029508ff6498392f6)
  • openlmi-storage.spec (a9226e01cfe6530cf40f9efe0629703c01a4144f)
  • org.openlmi.storage.policy (PRE-CREATION)
  • pycmpiLMI_Storage-cimprovagt (267447e284c78821be5f8a95fefa6b547e0e8044)
  • src/lmi/storage/LMI_DiskPartitioningConfigurationService.py (9417d2abe012d7ad46e603d5f9dc00c98e3a9b56)
  • src/lmi/storage/LMI_ExtentEncryptionConfigurationService.py (cd8fd1b1f0bd2c8d5e466ee5679800dc39ad324d)
  • src/lmi/storage/LMI_FileSystemConfigurationService.py (f6e21cdacaea091519cda5a744973076ea36a158)
  • src/lmi/storage/LMI_MountConfigurationService.py (a08935d26d459bf97ef6cc115c392ae0bfe7e54d)
  • src/lmi/storage/LMI_StorageConfigurationService.py (bf98619646d768a831cb00bd0bd99ed2a607f816)
  • src/lmi/storage/util/polkit.py (PRE-CREATION)

View Diff