diff options
author | Mohit Agrawal <moagrawa@redhat.com> | 2018-06-20 16:13:00 +0530 |
---|---|---|
committer | Shyamsundar Ranganathan <srangana@redhat.com> | 2018-06-25 13:58:21 +0000 |
commit | 892e9c1d32aa2b2897e714e6adfa00b332c04a9f (patch) | |
tree | f7a599a67ee12dfbac364053153f5e97b29fd242 | |
parent | e60d337201854e391fe32ceb86c72a4cb7f23467 (diff) |
glusterfs: access trusted peer group via remote-host command
Problem: In SSL environment the user is able to access volume
via remote-host command without adding node in a trusted pool
Solution: Change the list of rpc program in glusterd.c at the
time of initialization while SSL is enabled
> Change-Id: I987e433b639e68ad17b77b6452df1e22dbe0f199
> cherry picked from commit 234d611160840899bcfd5ab1c17a6253673d38ed
BUG: 1593526
fixes: bz#1593526
Change-Id: I705253e032239e92ecad1c6a9b7e423a022132b5
Signed-off-by: Mohit Agrawal <moagrawa@redhat.com>
-rw-r--r-- | xlators/mgmt/glusterd/src/glusterd.c | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/xlators/mgmt/glusterd/src/glusterd.c b/xlators/mgmt/glusterd/src/glusterd.c index 25089aef63b..0ed4eb0a2ac 100644 --- a/xlators/mgmt/glusterd/src/glusterd.c +++ b/xlators/mgmt/glusterd/src/glusterd.c @@ -1722,11 +1722,6 @@ init (xlator_t *this) goto out; } /* - * With strong authentication, we can afford to allow - * privileged operations over TCP. - */ - gd_inet_programs[1] = &gd_svc_cli_prog; - /* * This is the only place where we want secure_srvr to reflect * the management-plane setting. */ |