Project

General

Profile

Statistics
| Branch: | Tag: | Revision:

foreman/lib @ 6f9e04c9

Name Size
  api
  fog_extensions
  foreman
  net
  orchestration
  tasks
api_constraints.rb 432 Bytes
audit_extensions.rb 3.55 KB
core_extensions.rb 3.77 KB
fog_extensions.rb 1.52 KB
foreman.rb 368 Bytes
net.rb 1.03 KB
proxy_api.rb 11.3 KB
puppet_setting.rb 1.82 KB
task.rb 701 Bytes
timed_cached_store.rb 1.18 KB
vnc_proxy.rb 1.75 KB

Latest revisions

# Date Author Comment
6f9e04c9 01/24/2013 07:52 AM Joseph Magen

changes to taxonomies_controller
671b45e9 01/24/2013 07:52 AM Joseph Magen

fixes #2033 - Cannot assign a host to an org

Now its possible to change Locations / Organizations only via mass assign
2fa95807 01/24/2013 07:51 AM Joseph Magen

fixes #2001 - Changing Loc or Org after compute resource selection give 500 error
44c039e1 01/23/2013 07:08 AM Ohad Levy

refs #2146 - ensures redirect does not break on api requests too
8392a8c6 01/23/2013 03:48 AM Dominic Cleal

fixes #2146 - prevent double render
a79b633b 01/23/2013 03:41 AM Dominic Cleal

fixes #2151 - use DN environment variable instead of CN

nginx is unable to pass bits of the X.509 subject, only the entire DN, so
support that as a lowest common denominator.
24de57c0 01/20/2013 10:20 AM Dominic Cleal

refs #2069 - enable auth by default

Without authentication, sensitive information and power is available to all,
so improve security out of the box.
358ec5a3 01/20/2013 10:06 AM Dominic Cleal

fixes #2121, #2069 - restrict importers and ENC to puppetmasters and users

CVE-2013-0171: report and fact importers parse YAML directly from the remote
host without authentication. Untrusted YAML can instantiate objects and be
used to exploit Foreman.

CVE-2013-0174: external nodes (ENC) output is available to any source and...
dc742060 01/10/2013 05:30 AM Joseph Magen

added API v2 placeholders.
adfcf8f0 01/08/2013 08:24 AM Dominic Cleal

fixes #2109 - improve session token security

- adds security:generate token rake task to create static token
- generate and cache a token on startup if static token isn't present

Thanks to Sandor Szücs <>

View revisions

Also available in: Atom