Follow-up on the legitimate security concerns for ATLAS ACL updates.
---------- Forwarded message ----------
Date: Mon, 29 Jan 2007 11:08:07 +0100
From: Simone Campana <[log in to unmask]>
To: Frederic Brochu <[log in to unmask]>, [log in to unmask],
Jean-Philippe Baud <[log in to unmask]>,
Lana Abadie <[log in to unmask]>
Cc: [log in to unmask], Roger Jones <[log in to unmask]>
Subject: RE: storage in UK cloud
Hi Frederic. One clarification first: this is NOT an ATLAS program. It
has been written by Lana, who is in the DPM developers team. However, I
think there is no problem whatsoever for Lana and Jean Philippe to share
the code and the Makefile.
Lana, can you please send me the code for UpdateACLForMySQL and the
Makefile so that I can put it together with the binary?
P.S. For the sites, be aware that a small problem has been found in the
previous version of the tool. The problem has been fixed and I put a new
version under
/afs/cern.ch/user/c/campanas/public/DPM/update_acl_formysql.tar
Simone
> -----Original Message-----
> From: Frederic Brochu [mailto:[log in to unmask]]
> Sent: Monday, January 29, 2007 10:53 AM
> To: [log in to unmask]
> Cc: [log in to unmask]; Simone Campana; Roger Jones
> Subject: Re: storage in UK cloud
>
> As usual, there are some security concerns which prevent the
> update to be done:
>
> >From Yves Coppens, Birmingham sysadmin:
> Date: Mon, 29 Jan 2007 09:49:22 +0000
> From: Yves Coppens <[log in to unmask]>
> Reply-To: Testbed Support for GridPP member institutes
> <[log in to unmask]>
> To: [log in to unmask]
> Subject: Re: ATLAS request for the folowing dpms
>
> Hi Frederic,
>
> UpdateACLForMySQL is actually a binary file and not a script. Would it
be
> possible to get the source code so that I/we can look at it and
compile it
> myself/ourselves? One reason I'm asking this is that this an Atlas
program
> which requires the mysql password and as such I do not wish to run it.
>
> Thank you,
>
> Yves
>
> Best regards,
>
> Frederic
>
>
|