Hi Dave, we are currently at a squeeze bug-squashing-party, so I took a look.
On Sun, Nov 18, 2012 at 11:02:49PM +0000, Dave Love wrote: > I've worked on packaging for SGE to address problems with the current > version and to support (pre-release) SGE 8.1.3, though it will work with > the 8.1.2 with minor changes. The sge source > <https://arc.liv.ac.uk/trac/SGE/browser/sge> now has simple packaging > for installing into /opt/sge, but this is different. Do you prefer to change the source package name from "gridengine" to "sge", or would keeping "gridengine" be fine? It would be great if we could have a minimal changeset for the testing version to apply. > I've tagged this security as this version: > * allows installing in CSP mode; Is that a big change? > * changes the default configuration to avoid remote root without CSP, > assuming a separate qmaster > <http://arc.liv.ac.uk/SGE/howto/sge-security.html>; Is that something which could be backpatched easily to the version in testing? > * fixes problems with sgepasswd (now included) which weren't addressed by > 6.2u5-7.1 changes; As sgepasswd is not yet included, this one appears not to apply. > * avoids the remote startup part of the CVE that the bogus 6.2u5-7.1 > change didn't get right. Can you elaborate on that and/or provide the patch/changeset needed to fix this up? Best regards, Michael -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
