Project

General

Profile

Statistics
| Branch: | Tag: | Revision:

foreman/lib @ 44c039e1

Name Size
  api
  fog_extensions
  foreman
  net
  orchestration
  tasks
api_constraints.rb 432 Bytes
audit_extensions.rb 3.55 KB
core_extensions.rb 3.77 KB
fog_extensions.rb 1.52 KB
foreman.rb 368 Bytes
net.rb 1.03 KB
proxy_api.rb 11.3 KB
puppet_setting.rb 1.82 KB
task.rb 701 Bytes
timed_cached_store.rb 1.18 KB
vnc_proxy.rb 1.75 KB

Latest revisions

# Date Author Comment
44c039e1 01/23/2013 07:08 AM Ohad Levy

refs #2146 - ensures redirect does not break on api requests too
8392a8c6 01/23/2013 03:48 AM Dominic Cleal

fixes #2146 - prevent double render
a79b633b 01/23/2013 03:41 AM Dominic Cleal

fixes #2151 - use DN environment variable instead of CN

nginx is unable to pass bits of the X.509 subject, only the entire DN, so
support that as a lowest common denominator.
24de57c0 01/20/2013 10:20 AM Dominic Cleal

refs #2069 - enable auth by default

Without authentication, sensitive information and power is available to all,
so improve security out of the box.
358ec5a3 01/20/2013 10:06 AM Dominic Cleal

fixes #2121, #2069 - restrict importers and ENC to puppetmasters and users

CVE-2013-0171: report and fact importers parse YAML directly from the remote
host without authentication. Untrusted YAML can instantiate objects and be
used to exploit Foreman.

CVE-2013-0174: external nodes (ENC) output is available to any source and...
dc742060 01/10/2013 05:30 AM Joseph Magen

added API v2 placeholders.
adfcf8f0 01/08/2013 08:24 AM Dominic Cleal

fixes #2109 - improve session token security

- adds security:generate token rake task to create static token
- generate and cache a token on startup if static token isn't present

Thanks to Sandor Szücs <>
2a1269eb 01/03/2013 07:22 AM Dominic Cleal

fixes #2097 - improve debug when `puppet master --configprint` fails
47a2bac5 12/27/2012 10:59 AM Ohad Levy

fixes #2073 - undefined method `update!'
a490a1a4 12/27/2012 10:50 AM Ohad Levy

fixes #1947 - wrong notice pressing the power on/off button for vmware hosts

  • now using the real state from the server
  • also made sure that we validate power on/off requests
  • ensured our fog server objects respond to to_s and to state

View revisions

Also available in: Atom