Bernard Li wrote:
> 
>> Also I've seen that after finishing the installation, the tar 
>> image doesn't 
>> get removed and has world readable permissions. I think it would be a 
>> security problem, at least in our case in which we will use 
>> SystemImager to 
>> install computer classrooms.
> 
> We left it there such that it could be seeded in the future - I *think*
> there is an option of telling it to remove the tarball if the user wants
> to, but I'll have to double check that.  The tarball being world
> readable definitely seems like a bad thing, I'll make sure to change
> that.

Fixed the permssions on the tarball.

Moreover the remove of the tarball is delayed until the client can work
as a seeder, but after that the tarball is exctracted and removed...
here is the code:

    # Extract image.
    logmsg "Extracting image from ${bittorrent_tarball} ..."
    (cd /a/ && tar -xv${compress}f
${BITTORRENT_STAGING}/${bittorrent_tarball}) || shellout
    rm -f ${BITTORRRENT_STAGING}/${bittorrent_tarball}
    unset bittorrent_tarball

So you should not find that file in your client when the installation is
finished... and I suppose that if the tarball is correctly exctracted
then it should be also correctly removed... can you check your
autoinstall script?

> 
>> One last thing I forget to mention i the last post. I'm not 
>> sure why it 
>> happens, but the /tmp directory gets wrong permissions.
>>
>> In the image server:
>>
>> # ls -ld /var/lib/systemimager/images/aules/tmp/
>> drwxrwxrwt  10 root root 4096 May  3 
>> 11:42 /var/lib/systemimager/images/aules/tmp/
>>
>> In the tar file:
>>
>> # tar vtf /var/lib/systemimager/tarballs/image-aules.tar
>> ...
>> drwxrwxrwt root/root         0 2006-05-03 11:42:23 ./tmp/
>> ...
>>
>> But in the installed client:
>>
>> # ls -ld /tmp
>> drw-r--r-- 20 root root 4096 May 5 11:01 /tmp

Fixed in the trunk.

Cheers,
-Andrea


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Sisuite-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/sisuite-users

Reply via email to