Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 794871

Summary: [RFE] oVirt Config TUI should not run as root user
Product: [Retired] oVirt Reporter: Perry Myers <pmyers>
Component: ovirt-nodeAssignee: Joey Boggs <jboggs>
Status: CLOSED WONTFIX QA Contact: bugs <bugs>
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: acathrow, cshao, dfediuck, fdeutsch, gouyang, hadong, iheim, jboggs, leiwang, ovirt-bugs, ovirt-maint, ycui
Target Milestone: ---Keywords: FutureFeature
Target Release: 3.6.0   
Hardware: x86_64   
OS: Linux   
Whiteboard: node
Fixed In Version: 2.7.0 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 742998 Environment:
Last Closed: 2014-06-22 12:30:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 742998    
Bug Blocks: 829023    

Description Perry Myers 2012-02-17 20:03:59 UTC 
Description of problem:
Config TUI presently is run via sudo command so the entire Config UI is run as root user

Instead we should run the TUI as admin (unprivileged user) and use tightly configured sudo so that the TUI can take targeted actions as root user.  This will limit what someone in the TUI can do if they break out of the TUI
Comment 1 Itamar Heim 2014-06-22 12:30:41 UTC 
Closing old bugs. If this issue is still relevant/important in current version, please re-open the bug.