- Description has changed:
Diff:
~~~~
--- old
+++ new
@@ -2,4 +2,5 @@
In this first (last?) step the idea is to add coarse grained on/off type of
authorization. Proposed is to allow access to the IMM service for the root user
and members of one additional configurable linux group. Additionally members of
the same group as immnd itself should be allowed access, that would include the
opensaf processes.
-What access control should be the default in opensaf 4.5? I think this new
feature should be on meaning you cannot use IMM as any random user.
+Access control should be OFF by default in 4.5 for backwards compatibility
reasons. The feature should be configurable in runtime via IMM. That is it
should be possible to (optionally) configure an additional admin group name and
then enable access control.
+
~~~~
---
** [tickets:#938] IMM: access control**
**Status:** review
**Milestone:** 4.5.FC
**Created:** Tue Jun 10, 2014 05:30 AM UTC by Hans Feldt
**Last Updated:** Wed Aug 13, 2014 02:44 PM UTC
**Owner:** Hans Feldt
Requires #554 to provide authentication support.
In this first (last?) step the idea is to add coarse grained on/off type of
authorization. Proposed is to allow access to the IMM service for the root user
and members of one additional configurable linux group. Additionally members of
the same group as immnd itself should be allowed access, that would include the
opensaf processes.
Access control should be OFF by default in 4.5 for backwards compatibility
reasons. The feature should be configurable in runtime via IMM. That is it
should be possible to (optionally) configure an additional admin group name and
then enable access control.
---
Sent from sourceforge.net because [email protected] is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
_______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
