Project

General

Profile

Actions
Copy link

action #2434

closed

get rid of environment variables

Added by lnussel over 10 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
High
Assignee:
mlin7442
Category:
-
Target version:
Sprint 07
Start date:
2014-05-05
Due date:
% Done:

100%

Estimated time:
8.00 h

Description

openqa shouldn't use environment variables. When allowing the webui to set arbitrary environment variables a malicious user may use e.g. LD_PRELOAD. So let's use a different %config hash instead of %ENV.

Related issues 1 (0 open — 1 closed)

Related to openQA Project (public) - action #2214: Better management of ENV variables on job_templatesResolvedlnussel2014-04-03

Actions
Actions
Copy link
 #1

Updated by lnussel over 10 years ago

  • Priority changed from Normal to High
  • Estimated time set to 8.00 h
Actions
Copy link
 #2

Updated by bmwiedemann over 10 years ago

using a JSON string as a means of transport for %config (e.g. via %ENV{config} or a file) seems to be the best way then.

Actions
Copy link
 #3

Updated by lnussel over 10 years ago

  • Assignee set to mlin7442
Actions
Copy link
 #4

Updated by mlin7442 over 10 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 100
Actions
Copy link

Also available in: Atom PDF