Hi all,
Yes, this is a known issue https://twiki.cern.ch/twiki/bin/view/LCG/YaimGuide400#glite_yaim_torque_utils. It has been reported more than once in GGUS and Savannah, and probably also in this ML. I therefore take advantage of this mail to remind you that you can check YAIM known issues in the YAIM guide. I'm happy to update the wiki if someone is missing anything.
Thanks,
Maria
> -----Original Message-----
> From: LHC Computer Grid - Rollout [mailto:[log in to unmask]]
> On Behalf Of Cristi Magherusan
> Sent: Thursday, November 20, 2008 9:21 AM
> To: [log in to unmask]
> Subject: [LCG-ROLLOUT] small error/security issue due to extra
> whitespace while configuring apel on CE nodes
>
> Hello,
>
> The file /opt/glite/yaim/functions/config_apel_pbs provided by
> glite-yaim-torque-utils-4.0.2-2 contains an extra whitespace on line
> 35, which causes it to execute a command identical to the content of
> the $APEL_DB_PASSWORD variable. An error message appears but the config
> process continues smoothly. Anyway, for the paranoids, this is quite
> unsafe for those who may have "rm -rf /" as their APEL password ;)
>
> Best regards,
> Cristi
> --
> Cristi Măgherușan,
> Inginer de sistem/retea
> Universitatea Tehnică din Cluj-Napoca
> Centrul de Comunicații "Pusztai Kalman"
> Tel. 0264/401247 http://cc.utcluj.ro
|