Dominique Leuenberger 32ae66d7ad Accepting request 700350 from systemsmanagement:saltstack
- Include aliases in FQDNS grain (bsc#1121439)

- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch

- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch

- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Re-adds patch because of increased offset due to previous patch removal
- Removing patch to add root parameter to zypper module
- Fix for -t parameter in mount module
- Added:
  * mount-fix-extra-t-parameter.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch

OBS-URL: https://build.opensuse.org/request/show/700350
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=83
2019-05-03 20:37:55 +00:00

Salt-master as non-root user
============================

With this version of salt the salt-master will run as salt user.

Why an extra user
=================

While the current setup runs the master as root user, this is considered a security issue
and not in line with the other configuration management tools (eg. puppet) which runs as a
dedicated user. 

How can I undo the change
=========================

If you would like to make the change before you can do the following steps manually:
1. change the user parameter in the master configuration
   user: root
2. update the file permissions:
   as root: chown -R root /etc/salt /var/cache/salt /var/log/salt /var/run/salt
3. restart the salt-master daemon:
   as root: rcsalt-master restart or systemctl restart salt-master

NOTE
====

Running the salt-master daemon as a root user is considers by some a security risk, but
running as root, enables the pam external auth system, as this system needs root access to check authentication.

For more information:
http://docs.saltstack.com/en/latest/ref/configuration/nonroot.html
Description
No description provided
Readme 40 MiB
Languages
Shell 91.3%
Makefile 8.7%