[Pkg-puppet-devel] [SCM] Puppet packaging for Debian branch, squeeze-2.6.2, updated. debian/2.6.2-2-3-g3c1a844

nigel nigel at explanatorygap.net
Thu Dec 2 17:59:10 UTC 2010


The following commit has been merged in the squeeze-2.6.2 branch:
commit 4e7a27393e484137985af0dbef1775231300c3b3
Author: Paul Berry <paul at puppetlabs.com>
Date:   Wed Nov 24 15:32:32 2010 -0800

    Disable remote ralsh by default
    
    Changed the default auth.conf so that accesses to "/resource" are no
    longer allowed.  This means that to use "puppet resource -H" you will
    need to configure the target machine to enable access to the
    "/resource" URLs.

diff --git a/lib/puppet/network/rest_authconfig.rb b/lib/puppet/network/rest_authconfig.rb
index 82d5a9d..7abe069 100644
--- a/lib/puppet/network/rest_authconfig.rb
+++ b/lib/puppet/network/rest_authconfig.rb
@@ -17,7 +17,6 @@ module Puppet
       { :acl => "/certificate/", :method => :find, :authenticated => false },
       { :acl => "/certificate_request", :method => [:find, :save], :authenticated => false },
       { :acl => "/status", :method => [:find], :authenticated => true },
-      { :acl => "/resource", :method => [:find, :save, :search], :authenticated => true },
     ]
 
     def self.main
diff --git a/spec/unit/network/rest_authconfig_spec.rb b/spec/unit/network/rest_authconfig_spec.rb
index 351f3f0..06436e7 100755
--- a/spec/unit/network/rest_authconfig_spec.rb
+++ b/spec/unit/network/rest_authconfig_spec.rb
@@ -17,7 +17,6 @@ describe Puppet::Network::RestAuthConfig do
     { :acl => "/certificate/", :method => :find, :authenticated => false },
     { :acl => "/certificate_request", :method => [:find, :save], :authenticated => false },
     { :acl => "/status", :method => [:find], :authenticated => true },
-    { :acl => "/resource", :method => [:find, :save, :search], :authenticated => true },
   ]
 
   before :each do

-- 
Puppet packaging for Debian



More information about the Pkg-puppet-devel mailing list