projects / mirror / dsa-puppet.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 801dbab) | patch
samhain: disable SuidCheck for /srv/buildd/unpack on buildds
authorAurelien Jarno <aurelien@aurel32.net>
Sat, 8 Apr 2017 16:57:59 +0000 (18:57 +0200)
committerAurelien Jarno <aurelien@aurel32.net>
Sat, 8 Apr 2017 17:02:57 +0000 (19:02 +0200)
commitede01e5e88459e8301e33bbdd7a1d59639c3a624
tree98013af484dcaf5aaf5a481892947dbe87f2881dtree | snapshot
parent801dbab607d7ea046f89db2d3fe553ebfda0d228commit | diff
samhain: disable SuidCheck for /srv/buildd/unpack on buildds

The SuidCheck module was not available in jessie (despite our
configuration file mentioning it), and is now enabled by default in
stretch.

For the build daemons, we need to disable suid checks in
/srv/buildd/unpack.

For the porterboxes, we need to disable suid checks in
/srv/chroot/schroot-unpack.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
modules/samhain/templates/samhainrc.erb diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.