Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use a UNIX socket for the DRb server #42

Merged
merged 2 commits into from
Jul 23, 2018
Merged

Use a UNIX socket for the DRb server #42

merged 2 commits into from
Jul 23, 2018

Conversation

agrare
Copy link
Member

@agrare agrare commented Jul 23, 2018

Switch from using a normal TCP socket to a UNIX socket file and change
the file permissions to 0750 to prevent unprivileged users from being
able to access it.

CVE Number: CVE-2018-10905
https://bugzilla.redhat.com/show_bug.cgi?id=1599389

@agrare
Use a UNIX socket for the DRb server
73ef935 
Switch from using a normal TCP socket to a UNIX socket file and change
the file permissions to 0750 to prevent unprivileged users from being
able to access it.

CVE Number: CVE-2018-10905
https://bugzilla.redhat.com/show_bug.cgi?id=1599389
@agrare
Change from drb_port to drb_uri
dcf1d59
@Fryguy Fryguy mentioned this pull request Jul 23, 2018
Merged
@Fryguy Fryguy added the bug label Jul 23, 2018
@Fryguy Fryguy merged commit 7672ec3 into ManageIQ:master Jul 23, 2018
@agrare agrare deleted the use_unix_socket_for_drb_server branch July 23, 2018 18:22
@simaishi
Copy link

Fine backport (to manageiq-gems-pending repo) details:

$ git log -1
commit 8c8fc46514bfcf2212c7fcdedf2340916086dea6
Author: Jason Frey <fryguy9@gmail.com>
Date:   Mon Jul 23 14:14:17 2018 -0400

    Merge pull request #42 from agrare/use_unix_socket_for_drb_server
    
    Use a UNIX socket for the DRb server
    (cherry picked from commit 7672ec394b31a011f85676c9620f0eab825df149)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1603578

@simaishi
Copy link

@miq-bot add_label fine/backported
@miq-bot remove_label fine/yes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Fryguy Fryguy Fryguy approved these changes

Assignees

@Fryguy Fryguy

Labels
blocker bug fine/backported
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@agrare @simaishi @Fryguy