[Mageia-webteam] [Bug 530] [New] Restrict /packages POST to buildsystem host IP

Romain d'Alverny bugzilla-daemon at mageia.org
Thu Mar 24 17:56:52 CET 2011


https://bugs.mageia.org/show_bug.cgi?id=530

           Summary: Restrict /packages POST to buildsystem host IP
           Product: Websites
           Version: trunk
          Platform: i586
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: maintdb.mageia.org
        AssignedTo: mageia-webteam at mageia.org
        ReportedBy: rdalverny at gmail.com


The buildsystem posts to the maintainers db every package upload.

This post is protected with a secret key in buildsystem config, but we should
as well control from maintdb that the poster IP address matches the one from
the buildsystem host. Here, that is valstar.

$ host valstar.mageia.org
valstar.mageia.org has address 212.85.158.147
valstar.mageia.org has IPv6 address 2a02:2178:2:7::3


Reproducible: 

Steps to Reproduce:

-- 
Configure bugmail: https://bugs.mageia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the Mageia-webteam mailing list