Debian: ganeti arbitrary command execution


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Debian: ganeti arbitrary command execution
# 1  
Old 12-19-2009
Debian: ganeti arbitrary command execution

LinuxSecurity.com:

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
ganeti-confd(8) 						   Version 2.5.2						   ganeti-confd(8)

Name
       ganeti-confd - Ganeti conf daemon

Synopsis
       ganeti-confd [-f] [-d]

DESCRIPTION
ganeti-confd is a daemon used to answer queries related to the configuration of a Ganeti cluster. For testing purposes, you can give the -f option and the program won't detach from the running terminal. Debug-level message can be activated by giving the -d option. ROLE The role of the conf daemon is to make sure we have a highly available and very fast way to query cluster configuration values. This dae- mon is automatically active on all master candidates, and so has no single point of failure. It communicates via UDP so each query can eas- ily be sent to multiple servers, and it answers queries from a cached copy of the config it keeps in memory, so no disk access is required to get an answer. The config is reloaded from disk automatically when it changes, with a rate limit of once per second. If the conf daemon is stopped on all nodes, its clients won't be able to get query answers. COMMUNICATION PROTOCOL The confd protocol is an HMAC authenticated json-encoded custom format, over UDP. A client library is provided to make it easy to write software to query confd. More information can be found in the Ganeti 2.1 design doc, and an example usage can be seen in the (external) NBMA daemon for Ganeti. REPORTING BUGS
Report bugs to project website (http://code.google.com/p/ganeti/) or contact the developers using the Ganeti mailing list (ganeti@google- groups.com). SEE ALSO
Ganeti overview and specifications: ganeti(7) (general overview), ganeti-os-interface(7) (guest OS definitions). Ganeti commands: gnt-cluster(8) (cluster-wide commands), gnt-job(8) (job-related commands), gnt-node(8) (node-related commands), gnt- instance(8) (instance commands), gnt-os(8) (guest OS commands), gnt-group(8) (node group commands), gnt-backup(8) (instance import/export commands), gnt-debug(8) (debug commands). Ganeti daemons: ganeti-watcher(8) (automatic instance restarter), ganeti-cleaner(8) (job queue cleaner), ganeti-noded(8) (node daemon), ganeti-masterd(8) (master daemon), ganeti-rapi(8) (remote API daemon). Ganeti htools: htools(1) (generic binary), hbal(1) (cluster balancer), hspace(1) (capacity calculation), hail(1) (IAllocator plugin), hscan(1) (data gatherer from remote clusters). COPYRIGHT
Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011 Google Inc. Permission is granted to copy, distribute and/or modify under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. Ganeti ganeti-confd(8)