Bug 236820

Summary: oddjob: drop "dangerous" bits from /etc/oddjobd.conf
Product: [Fedora] Fedora Reporter: Chris Weyl <cweyl>
Component: oddjobAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 6   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 0.29-1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-09-06 00:10:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Chris Weyl 2007-04-17 19:52:09 UTC 
/etc/oddjobd.conf contains a couple stanzas which, while they should "never" be
accessible (e.g. the reboot method) still should probably not be in the "real"
config.  Any chance we could drop these stanzas and put them in a sample config,
say under %doc somewhere?

For reference:

        <method name="reboot">
          <helper exec="/sbin/reboot" arguments="0"/>
        </method>

        <method name="mkmyhomedir">
          <helper exec="/usr/lib/oddjob/mkhomedir" arguments="0"
prepend_user_name="yes"/>
          <allow user="root"/>
        </method>

        <method name="mkhomedirfor">
          <helper exec="/usr/lib/oddjob/mkhomedir" arguments="1"/>
          <allow user="root"/>
        </method>
Comment 1 Nalin Dahyabhai 2007-09-05 21:16:32 UTC 
I'm happy to drop the "reboot" bit, but I'll move the mkhomedir bits to a
subpackage for 0.29 rather than drop it out.