On 07/17/2012 06:52 PM, James Cammarata wrote:

> The power management subsystem was rewritten completely recently to
> address some security issues (namely, the possibility that commands
> could be injected to the shell call being run as root).

Ok ! This is the second time this week I've missed something quite
important in the same cobbler update =)

I didn't find anything in the changelog mentionning anything related to
this change. Am I looking in the wrong place ?

> All power commands now must exist as fence_* scripts in /usr/sbin (a
> known issue is that for RHEL5 the cman package installs them in
> /sbin). If you have a custom power script,...

Thank you for this useful description and your (very) quick answer.

Regards,

Jean-Baptiste


_______________________________________________
cobbler mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/cobbler

Reply via email to