[pve-devel] applied: [PATCH manager 1/3] node console: restrict all non-login commands to root at pam

Thomas Lamprecht t.lamprecht at proxmox.com
Mon Nov 6 15:38:52 CET 2023


Am 14/06/2023 um 12:42 schrieb Fabian Grünbichler:
> and not just upgrade.
> 
> note that the only other non-login command (ceph_install) is restricted to
> root at pam in the web UI anyway, and that the termproxy endpoint is lacking this
> check and thus always falls back to a login prompt for non-login commands
> requested by non-root users.
> 
> Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
> ---
>  PVE/API2/Nodes.pm | 10 +++++-----
>  1 file changed, 5 insertions(+), 5 deletions(-)
> 
>

applied, thanks!





More information about the pve-devel mailing list