trusted launcher is not passing environment to local jobs executed as data source
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Checkbox |
Fix Released
|
Critical
|
Zygmunt Krynicki |
Bug Description
This happened if plainbox-
- install plainbox plainbox-
- Prepare minimal whitelist as shown below
- sudo plainbox sru -w /path/to/
Expected:
- memory/info passes (it's the most basic memory test)
Actual:
- memory/info fails
- Trace as shown below
When plainbox uses the trusted launcher controller to execute a generated job that runs as root, the trusted launcher does not obtain environment specific to the job generator.
Minimal whitelist:
__memory__
memory/info
Trace:
cat: /jobs/memory.
Traceback (most recent call last):
File "/usr/bin/
load_
File "/usr/lib/
launcher.
File "/usr/lib/
output = subprocess.
File "/usr/lib/
raise CalledProcessEr
subprocess.
Related branches
- Sylvain Pineau (community): Approve
- Zygmunt Krynicki (community): Needs Resubmitting
-
Diff: 465 lines (+191/-106)4 files modifiedplainbox/plainbox/impl/ctrl.py (+13/-9)
plainbox/plainbox/impl/secure/launcher1.py (+90/-39)
plainbox/plainbox/impl/secure/test_launcher1.py (+50/-34)
plainbox/plainbox/impl/test_ctrl.py (+38/-24)
summary: |
- CHECKBOX_SHARE not defined if job run through trusted launcher + trusted launcher is not passing environment to local jobs executed as + data source |
description: | updated |
Changed in checkbox: | |
assignee: | nobody → Zygmunt Krynicki (zkrynicki) |
importance: | Undecided → Critical |
Changed in checkbox: | |
milestone: | none → plainbox-0.4b2 |
status: | New → Triaged |
Changed in checkbox: | |
status: | Triaged → In Progress |
Changed in checkbox: | |
status: | In Progress → Fix Committed |
Changed in checkbox: | |
status: | Fix Committed → Fix Released |