[Buildbot] #3069: make it possible for service specific admins to use jexec

Buildbot trac trac at buildbot.net
Tue Nov 25 22:39:22 UTC 2014


#3069: make it possible for service specific admins to use jexec
--------------------+--------------------------------
Reporter:  sa2ajj   |       Owner:
    Type:  task     |      Status:  new
Priority:  major    |   Milestone:  sys - on-bb-infra
 Version:           |  Resolution:
Keywords:  ansible  |
--------------------+--------------------------------

Comment (by dustin):

 Sean noted in #3004 that it's possible to escape a jail given unprivileged
 access to the host, which is what we'd be doing here. So we need to either
 decide that's OK (that we trust folks to not *deliberately* wreak havoc,
 and are using this only to limit accidental damage), or find another way
 (probably running sshd in jails).

--
Ticket URL: <http://trac.buildbot.net/ticket/3069#comment:2>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation


More information about the bugs mailing list