- **status**: review --> fixed
- **Comment**:
changeset: 5467:416bbfa19298
branch: opensaf-4.3.x
tag: tip
parent: 5459:2f5b0963d7a6
user: Anders Bjornerstedt <[email protected]>
date: Wed Jul 16 14:02:42 2014 +0200
summary: IMM: Provide validation for config changes on imm service objects
[#951]
changeset: 5468:2a56621b7c53
branch: opensaf-4.4.x
tag: tip
parent: 5460:f4077fe1dd54
user: Anders Bjornerstedt <[email protected]>
date: Wed Jul 16 14:06:34 2014 +0200
summary: IMM: Provide validation for config changes on imm service objects
[#951]
changeset: 5469:3c54d5698f94
tag: tip
parent: 5466:a63cbe718e35
user: Anders Bjornerstedt <[email protected]>
date: Wed Jul 16 14:14:06 2014 +0200
summary: IMM: Provide validation for config changes on imm service objects
[#951]
---
** [tickets:#951] IMM: Protect imm service objects against illegal changes.**
**Status:** fixed
**Milestone:** 4.3.3
**Created:** Mon Jul 07, 2014 11:55 AM UTC by Anders Bjornerstedt
**Last Updated:** Wed Jul 16, 2014 09:07 AM UTC
**Owner:** Anders Bjornerstedt
The following validation restrictions must be supported by the imm service:
This must be done in the imm service so that it works for 0PBE, 1PBE and 2PBE.
For the object 'opensafImm=opensafImm,safApp=safImmService':
1) 0PBE reject delete of the object.
2) 0PBE reject creates using class 'OpensafImm'
(all modifications to current config attributes are allowed after #934)
For the object 'safRdn=immManagement,safApp=safImmService':
3) Reject delete of the object.
4) Reject create using class 'SaImmMngt'
5) Validate modifications to attribute 'saImmRepositoryInit'
6) Reject use/modification of 'saImmOiTimeout'
PBE is currently not OI for 'safRdn=immManagement,safApp=safImmService'
and there is no complete OI support for this object. These checks will be caught
and validated by the IMMND server. This will work for all PBE varaints.
---
Sent from sourceforge.net because [email protected] is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
