Project

General

Profile

action #2434

get rid of environment variables

Added by lnussel over 8 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
High
Assignee:
mlin7442
Category:
-
Target version:
Sprint 07
Start date:
2014-05-05
Due date:
% Done:

100%

Estimated time:
8.00 h
Difficulty:

Description

openqa shouldn't use environment variables. When allowing the webui to set arbitrary environment variables a malicious user may use e.g. LD_PRELOAD. So let's use a different %config hash instead of %ENV.

Related issues

Related to openQA Project - action #2214: Better management of ENV variables on job_templatesResolved2014-04-03

History

#1 Updated by lnussel over 8 years ago

  • Priority changed from Normal to High
  • Estimated time set to 8.00 h

#2 Updated by bmwiedemann over 8 years ago

using a JSON string as a means of transport for %config (e.g. via %ENV{config} or a file) seems to be the best way then.

#3 Updated by lnussel over 8 years ago

  • Assignee set to mlin7442

#4 Updated by mlin7442 over 8 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 100

Also available in: Atom PDF