Change in vdsm[master]: sudoers: narrow dmidecode commandline

danken at redhat.com danken at redhat.com
Sun Feb 21 15:32:46 UTC 2016


Dan Kenigsberg has uploaded a new change for review.

Change subject: sudoers: narrow dmidecode commandline
......................................................................

sudoers: narrow dmidecode commandline

Vdsm does needs only a very limitted information from dmidecode. sudoers
should be as narrow as possible.

Change-Id: I7438747abbd2286fb1482861da88364fb37e9658
Signed-off-by: Dan Kenigsberg <danken at redhat.com>
---
M vdsm/sudoers.vdsm.in
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/vdsm refs/changes/74/53774/1

diff --git a/vdsm/sudoers.vdsm.in b/vdsm/sudoers.vdsm.in
index ae81924..2956e77 100644
--- a/vdsm/sudoers.vdsm.in
+++ b/vdsm/sudoers.vdsm.in
@@ -1,5 +1,5 @@
 Cmnd_Alias VDSM_LIFECYCLE = \
-    @DMIDECODE_PATH@, \
+    @DMIDECODE_PATH@ -s system-uuid, \
     @VDSMDIR@/mk_sysprep_floppy
 Cmnd_Alias VDSM_STORAGE = @MOUNT_PATH@, @UMOUNT_PATH@, \
     @FSCK_PATH@ -p *, \


-- 
To view, visit https://gerrit.ovirt.org/53774
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7438747abbd2286fb1482861da88364fb37e9658
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Dan Kenigsberg <danken at redhat.com>


More information about the vdsm-patches mailing list