diff options
| author | Radosław Piliszek <radoslaw.piliszek@gmail.com> | 2022-08-29 09:55:59 +0000 |
|---|---|---|
| committer | Radosław Piliszek <radoslaw.piliszek@gmail.com> | 2022-08-29 10:05:05 +0000 |
| commit | 5b1da017988c987fc68b55d1f45b5d2676474ce1 (patch) | |
| tree | b8e18e89f4ea8ffc55f0c9e8979e71fee002575c /docker/base/sudoers | |
| parent | 91c2cc0d8d4caf8fa6567b95d8f7e7b4fc4dd443 (diff) | |
| download | kolla-5b1da017988c987fc68b55d1f45b5d2676474ce1.tar.gz kolla-5b1da017988c987fc68b55d1f45b5d2676474ce1.zip | |
Fix CVE-2022-38060
Closes-Bug: #1985784
Change-Id: I66476a2b396e2cbe41e68ac51f57aae1806b2ed8
Diffstat (limited to 'docker/base/sudoers')
| -rw-r--r-- | docker/base/sudoers | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers index da9c04c30..9b2bfb8dc 100644 --- a/docker/base/sudoers +++ b/docker/base/sudoers @@ -6,6 +6,8 @@ # anyone in the kolla group may sudo -E (set the environment) Defaults: %kolla setenv +Defaults secure_path="/var/lib/kolla/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + # root may run any commands via sudo as the network seervice user. This is # neededfor database migrations of existing services which have not been # converted to run as a non-root user, but instead do that via sudo -E glance |