Custom Query (431 matches)
Results (145 - 147 of 431)
Ticket | Resolution | Summary | Owner | Reporter |
---|---|---|---|---|
#508 | fixed | IZ2553: /tmp/*_messages files are subject to symlink vulnerabilities | Dave Love <d.love@…> | brooks |
Description |
[Imported from gridengine issuezilla http://gridengine.sunsource.net/issues/show_bug.cgi?id=2553] Issue #: 2553 Platform: All Reporter: brooks (brooks) Component: gridengine OS: All Subcomponent: execution Version: current CC: None defined Status: NEW Priority: P3 Resolution: Issue type: DEFECT Target milestone: --- Assigned to: pollinger (pollinger) QA Contact: pollinger URL: * Summary: /tmp/*_messages files are subject to symlink vulnerabilities Status whiteboard: Attachments: Issue 2553 blocks: Votes for issue 2553: Opened: Thu Apr 10 13:48:00 -0700 2008 ------------------------ As far as I can tell, the /tmp/*_messages files deamons use early in startup are created without the exclusive flag. As a result, ordinary users can create symlinks in their place and cause the daemons to write to arbitrary files. The files should either be opened exclusivly or the locations should be changed to a location not writable by ordinary users. |
|||
#521 | fixed | IZ2586: inst_sge should exit with non-zero exit status if -auto given with non-existant file | opoplawski | |
Description |
[Imported from gridengine issuezilla http://gridengine.sunsource.net/issues/show_bug.cgi?id=2586] Issue #: 2586 Platform: PC Reporter: opoplawski (opoplawski) Component: gridengine OS: Linux Subcomponent: install Version: 6.2beta CC: None defined Status: REOPENED Priority: P3 Resolution: Issue type: DEFECT Target milestone: --- Assigned to: dom (dom) QA Contact: dom URL: * Summary: inst_sge should exit with non-zero exit status if -auto given with non-existant file Status whiteboard: Attachments: Issue 2586 blocks: Votes for issue 2586: Opened: Tue May 27 14:13:00 -0700 2008 ------------------------ inst_sge should exit with non-zero exit status if -auto given with non-existant file. This should fix: --- gridengine/source/dist/inst_sge.auto 2007-10-03 11:24:25.000000000 -0600 +++ gridengine/source/dist/inst_sge 2007-10-03 11:24:35.000000000 -0600 @@ -138,6 +138,7 @@ FILE="$2" if [ ! -f "$2" ]; then ErrUsage + exit 1 fi shift ARGC=`expr $ARGC - 1` Perhaps ErrUsage should exit itself? There look to be other spots in inst_sge where an exit needs to be added after ErrUsage. ------- Additional comments from opoplawski Tue Oct 27 11:39:51 -0700 2009 ------- This appears to have been fixed in 6.2u4 ------- Additional comments from opoplawski Tue Oct 27 11:41:25 -0700 2009 ------- I take that back... |
|||
#41 | fixed | IZ258: output of job/jatask/petask ids | joga | |
Description |
[Imported from gridengine issuezilla http://gridengine.sunsource.net/issues/show_bug.cgi?id=258] Issue #: 258 Platform: All Reporter: joga (joga) Component: gridengine OS: All Subcomponent: cleanup Version: 5.3 CC: None defined Status: STARTED Priority: P3 Resolution: Issue type: ENHANCEMENT Target milestone: --- Assigned to: ernst (ernst) QA Contact: ernst URL: * Summary: output of job/jatask/petask ids Status whiteboard: Attachments: Issue 258 blocks: Votes for issue 258: Opened: Wed May 15 06:27:00 -0700 2002 ------------------------ We have dozens of places in code formatting job, jatask and optionally petask ids (in many different ways). A function should be created sge_get_job_task_id(job_id, ja_task_id, pe_task_id) returning a const char * and all formatting code should be replaced by a call of this function. ------- Additional comments from joga Wed May 22 03:27:08 -0700 2002 ------- starting ------- Additional comments from joga Wed May 22 06:14:44 -0700 2002 ------- created a function job_get_id_string(job_id, ja_task_id, pe_task_id) in sge_job_jatask.* (libgdi) that returns a formatted string containing the id. Output format can be localized. Changed about 2 dozen code pieces outputting job/jatask/petask ids in different formats - hundreds still to follow! But these changes show it's worth the effort: The former output often lacked information like the ja task id, or the pe task id in case of pe tasks making impossible a precise analysis of error situations. ------- Additional comments from joga Wed May 29 01:27:16 -0700 2002 ------- Improved job_get_id_string: if ja task id is 0, only output the job id |
Note: See TracQuery
for help on using queries.