[Buildbot] #3069: make it possible for service specific admins to use jexec
Buildbot trac
trac at buildbot.net
Tue Nov 25 22:39:22 UTC 2014
#3069: make it possible for service specific admins to use jexec
--------------------+--------------------------------
Reporter: sa2ajj | Owner:
Type: task | Status: new
Priority: major | Milestone: sys - on-bb-infra
Version: | Resolution:
Keywords: ansible |
--------------------+--------------------------------
Comment (by dustin):
Sean noted in #3004 that it's possible to escape a jail given unprivileged
access to the host, which is what we'd be doing here. So we need to either
decide that's OK (that we trust folks to not *deliberately* wreak havoc,
and are using this only to limit accidental damage), or find another way
(probably running sshd in jails).
--
Ticket URL: <http://trac.buildbot.net/ticket/3069#comment:2>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation
More information about the bugs
mailing list