On Tue, Jul 17, 2012 at 11:59 AM, Jean-Baptiste Denis <[email protected]> wrote: > On 07/17/2012 06:52 PM, James Cammarata wrote: > >> The power management subsystem was rewritten completely recently to >> address some security issues (namely, the possibility that commands >> could be injected to the shell call being run as root). > > Ok ! This is the second time this week I've missed something quite > important in the same cobbler update =) > > I didn't find anything in the changelog mentionning anything related to > this change. Am I looking in the wrong place ?
Nope, you didn't miss it, I'm still trying to get caught up on the documentation. Right now there's just a placeholder mentioning that it changed, but here's where it will be in the future: http://cobbler.github.com/manuals/2.2.3/5/6_-_Power_Management.html I took out the old doc so that it wouldn't confuse people going forward. >> All power commands now must exist as fence_* scripts in /usr/sbin (a >> known issue is that for RHEL5 the cman package installs them in >> /sbin). If you have a custom power script,... > > Thank you for this useful description and your (very) quick answer. _______________________________________________ cobbler mailing list [email protected] https://fedorahosted.org/mailman/listinfo/cobbler
