Menu

#951 IMM: Protect imm service objects against illegal changes.

4.3.3
fixed
None
defect
imm
-
major
2014-07-16
2014-07-07
No

The following validation restrictions must be supported by the imm service:
This must be done in the imm service so that it works for 0PBE, 1PBE and 2PBE.

For the object 'opensafImm=opensafImm,safApp=safImmService':

1) 0PBE reject delete of the object.
2) 0PBE reject creates using class 'OpensafImm'
(all modifications to current config attributes are allowed after #934)

For the object 'safRdn=immManagement,safApp=safImmService':

3) Reject delete of the object.
4) Reject create using class 'SaImmMngt'
5) Validate modifications to attribute 'saImmRepositoryInit'
6) Reject use/modification of 'saImmOiTimeout'

PBE is currently not OI for 'safRdn=immManagement,safApp=safImmService'
and there is no complete OI support for this object. These checks will be caught
and validated by the IMMND server. This will work for all PBE varaints.

Related

Tickets: #951
Wiki: ChangeLog-4.3.3
Wiki: ChangeLog-4.4.1

Discussion

  • Anders Bjornerstedt

    • status: unassigned --> accepted
     
  • Anders Bjornerstedt

    • status: accepted --> review
     
  • Anders Bjornerstedt

    Will push this tomorrow if there are no objections.

     
  • Anders Bjornerstedt

    • status: review --> fixed
     
  • Anders Bjornerstedt

    changeset: 5467:416bbfa19298
    branch: opensaf-4.3.x
    tag: tip
    parent: 5459:2f5b0963d7a6
    user: Anders Bjornerstedt anders.bjornerstedt@ericsson.com
    date: Wed Jul 16 14:02:42 2014 +0200
    summary: IMM: Provide validation for config changes on imm service objects [#951]

    changeset: 5468:2a56621b7c53
    branch: opensaf-4.4.x
    tag: tip
    parent: 5460:f4077fe1dd54
    user: Anders Bjornerstedt anders.bjornerstedt@ericsson.com
    date: Wed Jul 16 14:06:34 2014 +0200
    summary: IMM: Provide validation for config changes on imm service objects [#951]

    changeset: 5469:3c54d5698f94
    tag: tip
    parent: 5466:a63cbe718e35
    user: Anders Bjornerstedt anders.bjornerstedt@ericsson.com
    date: Wed Jul 16 14:14:06 2014 +0200
    summary: IMM: Provide validation for config changes on imm service objects [#951]

     

    Related

    Tickets: #951


Log in to post a comment.