diff options
| author | Maksim Malchuk <maksim.malchuk@gmail.com> | 2022-10-08 01:29:02 +0300 |
|---|---|---|
| committer | Radosław Piliszek <radoslaw.piliszek@gmail.com> | 2022-10-09 13:43:42 +0000 |
| commit | b8a352647d57d35463e551a0d360c19fb2ad34c6 (patch) | |
| tree | 16ceb70891909ff2352fd36fb570d3abb89a5bfb /docker/kolla-toolbox | |
| parent | 7c41c917242b1eb651942a3048e132f0c1d6ede4 (diff) | |
| download | kolla-b8a352647d57d35463e551a0d360c19fb2ad34c6.tar.gz kolla-b8a352647d57d35463e551a0d360c19fb2ad34c6.zip | |
Fix Swift deployment issue
Swift deployment is broken since CVE-2022-38060 fixed sudoers file in
the I66476a2b396e2cbe41e68ac51f57aae1806b2ed8. The kolla-toolbox
container have their own virtualenv path differs from all other
containers. This change adds the correct sudoers secure_path
configuration needed only for kolla-toolbox conainer.
Related-Bug: #1985784
Change-Id: I3651576ee354364d639c187ff750491667ecab56
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
Diffstat (limited to 'docker/kolla-toolbox')
| -rw-r--r-- | docker/kolla-toolbox/ansible_sudoers | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/docker/kolla-toolbox/ansible_sudoers b/docker/kolla-toolbox/ansible_sudoers index c43917f65..5a3f109b4 100644 --- a/docker/kolla-toolbox/ansible_sudoers +++ b/docker/kolla-toolbox/ansible_sudoers @@ -1 +1,3 @@ +Defaults secure_path="/opt/ansible/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + ansible ALL=(root) NOPASSWD: /opt/ansible/bin/ansible localhost -m find_disks -a *, /usr/local/bin/ansible localhost -m find_disks -a * |