Status: New
Owner: ----
New issue 197 by [email protected]: sudo escalation and non root ssh
http://code.google.com/p/ganeti/issues/detail?id=197
Hi,
I'm evaluating ganeti for use in a PCI-DSS environment (currently
ganeti-2.4.2 from squeeze-backports). One point in PCI-DSS is: 8.5.8 Do not
use group, shared, or generic accounts and passwords. So the account "root"
is forbidden.
I already found the patch[1]. But had no luck with it. It does not apply
without errors and it seems incomplete:
[1] http://markmail.org/message/2elzvavwuyeipmln
# gnt-instance console XXXX.domain.tld
Traceback (most recent call last):
File "/usr/sbin/gnt-instance", line 19, in <module>
sys.exit(main.Main())
File "/usr/lib/pymodules/python2.6/ganeti/client/gnt_instance.py", line
1516, in Main
override={"tag_type": constants.TAG_INSTANCE})
File "/usr/lib/pymodules/python2.6/ganeti/cli.py", line 1932, in
GenericMain
result = func(options, args)
File "/usr/lib/pymodules/python2.6/ganeti/client/gnt_instance.py", line
917, in ConnectToInstanceConsole
opts.show_command, cluster_name)
File "/usr/lib/pymodules/python2.6/ganeti/client/gnt_instance.py", line
950, in _DoConsole
batch=True, quiet=False, tty=True)
TypeError: BuildCmd() takes at least 5 non-keyword arguments (4 given)
So my wish is: have non root ssh and an escalation command implemented in
future ganeti versions.
TIA, Sascha.
