]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c00e76f) | patch
mon/config-key: limit caps allowed to access the store
authorJoao Eduardo Luis <joao@suse.de>
Wed, 17 Oct 2018 13:42:15 +0000 (14:42 +0100)
committerAbhishek Lekshmanan <abhishek@suse.com>
Thu, 10 Jan 2019 18:21:58 +0000 (19:21 +0100)
commit0b69e60877c5dcfda7c6987954770cf758c21fb7
treee02590eb5c8ff6f51d83dc8717822a145608a3c0tree | snapshot
parentc00e76f2baab3f95bc3caebd0958a94d94f91080commit | diff
mon/config-key: limit caps allowed to access the store

Henceforth, we'll require explicit `allow` caps for commands, or for the
config-key service. Blanket caps are no longer allowed for the
config-key service, except for 'allow *'.

(for luminous and mimic, we're also ensuring MonCap's parser is able to
understand forward slashes '/' when parsing prefixes)

Signed-off-by: Joao Eduardo Luis <joao@suse.de>
(cherry picked from commit 5fff611041c5afeaf3c8eb09e4de0cc919d69237)
qa/suites/rados/singleton/all/mon-config-key-caps.yaml [new file with mode: 0644] blob
qa/workunits/mon/test_config_key_caps.sh [new file with mode: 0755] blob
src/mon/MonCap.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.