Project

General

Profile

Actions
Copy link

action #166742

closed

Prevent security email for ariel

Added by ybonatakis 3 months ago. Updated 3 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
okurz
Category:
Regressions/Crashes
Target version:
openQA Project (public) - Ready
Start date:
2024-09-12
Due date:
% Done:

0%

Estimated time:
Tags:
infra

Description

Observation

Geekotest trying to run bash command as sudo spams email notifications

Reproduce

logging into ariel
sudo -u geekotest bash
and try to run sudo commands

Suggestions

  • disabling mail_no_user
  • mock sudo in geekotest bash
  • look at sudoers lecture feature

Acceptance Criteria

  • AC1: No security emails regarding geekotest executing sudo

Slack Discussion

https://suse.slack.com/archives/C02AJ1E568M/p1726138534369959

Actions
Copy link
 #1

Updated by okurz 3 months ago

  • Category set to Regressions/Crashes
  • Status changed from New to Feedback
  • Assignee set to okurz

In which case does geekotest try to run sudo? the steps to reproduce show something that only a human operator would do, probably not any existing automation. Can you clarify?

Actions
Copy link
 #2

Updated by okurz 3 months ago

  • Status changed from Feedback to Rejected
  • Target version changed from Tools - Next to Ready

closing due to no response

Actions
Copy link
 #3

Updated by ybonatakis 3 months ago

just for the record as I just saw this. My understanding this is indeed occurred from human doing. And apparently we dont want to get emails in such cases.

Actions
Copy link
 #4

Updated by okurz 3 months ago

ybonatakis wrote in #note-3:

just for the record as I just saw this. My understanding this is indeed occurred from human doing. And apparently we dont want to get emails in such cases.

I still want to get an email for something that is noteworthy and extraordinary. If it's recurring then we should handle it differently of course.

Actions
Copy link

Also available in: Atom PDF