Project

General

Profile

Actions

Bug #32827

closed

Set sendmail location and arguments via puppet/installer

Added by Lukas Zapletal almost 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Category:
Foreman modules
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

We have a setting to set sendmail location/arguments in the UI/CLI/API however this brought some issues with security:

https://github.com/theforeman/foreman/pull/8599#issuecomment-863225804

As a better long term solution, it would be great to set both settings in settings.yaml via puppet, they automatically override UI and there is a warning info icon informing users that the setting is read only and editable only via settings.yaml.


Related issues 1 (0 open1 closed)

Related to Foreman - Bug #32753: CVE-2021-3584: Remote code execution through Sendmail configurationClosedLukas ZapletalActions
Actions #1

Updated by Ewoud Kohl van Wijngaarden almost 3 years ago

  • Related to Bug #32753: CVE-2021-3584: Remote code execution through Sendmail configuration added
Actions #2

Updated by The Foreman Bot almost 3 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Ewoud Kohl van Wijngaarden
  • Pull request https://github.com/theforeman/puppet-foreman/pull/961 added
Actions #3

Updated by Ewoud Kohl van Wijngaarden almost 3 years ago

  • Status changed from Ready For Testing to New
  • Assignee deleted (Ewoud Kohl van Wijngaarden)
  • Pull request deleted (https://github.com/theforeman/puppet-foreman/pull/961)

Testing bot integration

Actions #4

Updated by The Foreman Bot almost 3 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Ewoud Kohl van Wijngaarden
  • Pull request https://github.com/theforeman/puppet-foreman/pull/961 added
Actions #5

Updated by Ewoud Kohl van Wijngaarden almost 3 years ago

  • Status changed from Ready For Testing to New
  • Pull request deleted (https://github.com/theforeman/puppet-foreman/pull/961)

Again, apologies for the spam.

Actions #6

Updated by Ewoud Kohl van Wijngaarden almost 3 years ago

  • Assignee deleted (Ewoud Kohl van Wijngaarden)
Actions #7

Updated by The Foreman Bot almost 3 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Ewoud Kohl van Wijngaarden
  • Pull request https://github.com/theforeman/puppet-foreman/pull/961 added
Actions #8

Updated by The Foreman Bot almost 3 years ago

  • Fixed in Releases 3.0.0 added
Actions #9

Updated by Ewoud Kohl van Wijngaarden almost 3 years ago

  • Status changed from Ready For Testing to Closed
Actions

Also available in: Atom PDF