Re: Local provider - isolating sudo usage

2014-01-25 Thread roger peppe
On 25 January 2014 01:58, Andrew Wilkins andrew.wilk...@canonical.com wrote: On Sat, Jan 25, 2014 at 1:24 AM, roger peppe roger.pe...@canonical.com wrote: On 24 January 2014 10:59, Andrew Wilkins andrew.wilk...@canonical.com wrote: On Fri, Jan 24, 2014 at 11:38 PM, roger peppe

Re: Local provider - isolating sudo usage

2014-01-24 Thread roger peppe
On 24 January 2014 01:14, Andrew Wilkins andrew.wilk...@canonical.com wrote: I removed this bits that chown to the user from the local provider. I can't, unfortunately, easily remove the only other remaining part: chowning the ~/.juju/ssh dir and keys. Suggestions welcome. There's also a Chown

Re: Local provider - isolating sudo usage

2014-01-24 Thread Andrew Wilkins
On Sat, Jan 25, 2014 at 1:24 AM, roger peppe roger.pe...@canonical.comwrote: On 24 January 2014 10:59, Andrew Wilkins andrew.wilk...@canonical.com wrote: On Fri, Jan 24, 2014 at 11:38 PM, roger peppe roger.pe...@canonical.com wrote: On 24 January 2014 01:14, Andrew Wilkins

Re: Local provider - isolating sudo usage

2014-01-23 Thread Nate Finch
That sounds awesome. On Wed, Jan 22, 2014 at 6:12 PM, Andrew Wilkins andrew.wilk...@canonical.com wrote: Hi folks, I'm working on changing the local provider so that sudo is not needed from outside Juju; juju bootstrap and juju destroy-environment will prompt as necessary. I would like

Re: Local provider - isolating sudo usage

2014-01-23 Thread Aaron Bentley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14-01-22 06:12 PM, Andrew Wilkins wrote: I would like to also prevent Juju from allowing the user to run with sudo from the outside. This will allow us to remove all of the code pathways that change ownership to the sudo caller, and avoid

Re: Local provider - isolating sudo usage

2014-01-23 Thread roger peppe
Thank you! Let's get rid of every chown in the code base. On 22 January 2014 23:12, Andrew Wilkins andrew.wilk...@canonical.com wrote: Hi folks, I'm working on changing the local provider so that sudo is not needed from outside Juju; juju bootstrap and juju destroy-environment will prompt as

Re: Local provider - isolating sudo usage

2014-01-23 Thread Andrew Wilkins
The core local provider changes have been merged now. For a summary of how the local provider bootstraps now, see: https://codereview.appspot.com/55880043/ I removed this bits that chown to the user from the local provider. I can't, unfortunately, easily remove the only other remaining part: