[Bug 1219985] Symlinked states not found after fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch
https://bugzilla.suse.com/show_bug.cgi?id=1219985 https://bugzilla.suse.com/show_bug.cgi?id=1219985#c2 Pablo Suárez Hernández <pablo.suarezhernandez@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |georg.pfuetzenreuter@suse.c | |om Flags| |needinfo?(georg.pfuetzenreu | |ter@suse.com) --- Comment #2 from Pablo Suárez Hernández <pablo.suarezhernandez@suse.com> --- Due to the CVE fixes, for security reasons the symlinks would ONLY work if the targetted file is part of the same "file_root". By default, the "file_roots" for a Salt Master (and also for salt-call --local execution) are: base: - /srv/salt - /srv/spm/salt If you have formulas in other directories that you want to expose in the Salt fileserver, then maybe what you would need is to add it to the "file_roots" in Salt Master configuration (i.a. /etc/salt/master.d/custom.conf or minion configuration). Something like this: file_roots: base: - /srv/salt/ - /srv/spm/salt - /srv/formula/ Then you could remove the symlinks as the formulas will be exposed in the Salt fileserver as they are part of the file roots. Would that work for you? -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com