Go to file
2024-08-29 12:04:40 +00:00
_lastrevision - Fix cloud minion configuration for multiple masters (bsc#1229109) 2024-08-29 12:04:40 +00:00
_multibuild - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
_service - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
.gitattributes - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
.gitignore - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
3005.1-implement-zypper-removeptf-573.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
3006.0-prevent-_pygit2.giterror-error-loading-known_.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
activate-all-beacons-sources-config-pillar-grains.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-custom-suse-capabilities-as-grains.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-environment-variable-to-know-if-yum-is-invoked-f.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-migrated-state-and-gpg-key-management-functions-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-missing-contextvars-dependency-in-salt.version.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-publish_batch-to-clearfuncs-exposed-methods.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-salt-ssh-support-with-venv-salt-minion-3004-493.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-sleep-on-exception-handling-on-minion-connection.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-standalone-configuration-file-for-enabling-packa.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
add-support-for-gpgautoimport-539.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
allow-all-primitive-grain-types-for-autosign_grains-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
allow-vendor-change-option-with-zypper.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
async-batch-implementation.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
avoid-conflicts-with-dependencies-versions-bsc-12116.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
avoid-excessive-syslogging-by-watchdog-cronjob-58.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
bsc-1176024-fix-file-directory-user-and-group-owners.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
change-the-delimeters-to-prevent-possible-tracebacks.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
control-the-collection-of-lvm-grains-via-config.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
debian-info_installed-compatibility-50453.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
decode-oscap-byte-stream-to-string-bsc-1219001.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
define-__virtualname__-for-transactional_update-modu.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
dnfnotify-pkgset-plugin-implementation-3002.2-450.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
do-not-call-the-async-wrapper-calls-with-the-separat.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
don-t-use-shell-sbin-nologin-in-requisites.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
drop-serial-from-event.unpack-in-cli.batch_async.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
early-feature-support-config.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
enable-passing-a-unix_socket-for-mysql-returners-bsc.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
enhance-openscap-module-add-xccdf_eval-call-386.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
firewalld-normalize-new-rich-rules-before-comparing-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-bsc-1065792.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-calculation-of-sls-context-vars-when-trailing-do.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-cve-2023-34049-bsc-1215157.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-for-suse-expanded-support-detection.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-issue-2068-test.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-missing-minion-returns-in-batch-mode-360.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-optimization_order-opt-to-prevent-test-fails.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-ownership-of-salt-thin-directory-when-using-the-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-problematic-tests-and-allow-smooth-tests-executi.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-regression-multiple-values-for-keyword-argument-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-regression-with-depending-client.ssh-on-psutil-b.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-salt-warnings-and-testuite-for-python-3.11-635.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-some-issues-detected-in-salt-support-cli-module-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-status.diskusage-and-exclude-some-tests-to-run-w.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-tests-failures-and-errors-when-detected-on-vm-ex.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-tests-to-make-them-running-with-salt-testsuite.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-the-aptpkg.py-unit-test-failure.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-the-regression-for-yumnotify-plugin-456.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-the-regression-of-user.present-state-when-group-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-traceback.print_exc-calls-for-test_pip_state-432.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-user.list_groups-omits-remote-groups.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fix-version-detection-and-avoid-building-and-testing.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fixed-keyerror-in-logs-when-running-a-state-that-fai.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
fixes-for-python-3.10-502.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
html.tar.bz2 - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
implement-the-calling-for-batch-async-from-the-salt-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
improve-broken-events-catching-and-reporting.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
improve-pip-target-override-condition-with-venv_pip_.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
improve-salt.utils.json.find_json-bsc-1213293.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
include-aliases-in-the-fqdns-grains.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
info_installed-works-without-status-attr-now.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
join-masters-if-it-is-a-list-671.patch - Fix cloud minion configuration for multiple masters (bsc#1229109) 2024-08-29 12:04:40 +00:00
let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-aptpkg.list_repos-compatible-on-enabled-disable.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-importing-seco.range-thread-safe-bsc-1211649.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-logging-calls-lighter.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-master_tops-compatible-with-salt-3000-and-older.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-reactor-engine-less-blocking-the-eventpublisher.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-salt-master-self-recoverable-on-killing-eventpu.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-setup.py-script-to-not-require-setuptools-9.1.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-sure-configured-user-is-properly-set-by-salt-bs.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-sure-the-file-client-is-destroyed-upon-used.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
make-tests-compatible-with-venv-bundle.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
mark-salt-3006-as-released-586.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
only-call-native_str-on-curl_debug-message-in-tornad.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
pass-the-context-to-pillar-ext-modules.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prefer-unittest.mock-for-python-versions-that-are-su.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-oom-with-high-amount-of-batch-async-calls-bs.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-possible-exception-in-tornado.concurrent.fut.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-possible-exceptions-on-salt.utils.user.get_g.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
prevent-shell-injection-via-pre_flight_script_args-4.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
provide-systemd-timer-unit.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
read-repo-info-without-using-interpolation-bsc-11356.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
README.SUSE - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
remove-redundant-_file_find-call-to-the-master.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
remove-unused-import-causing-delays-on-starting-salt.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
restore-default-behaviour-of-pkg-list-return.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
return-the-expected-powerpc-os-arch-bsc-1117995.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
revert-fixing-a-use-case-when-multiple-inotify-beaco.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
revert-make-sure-configured-user-is-properly-set-by-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
revert-usage-of-long-running-req-channel-bsc-1213960.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
run-salt-api-as-user-salt-bsc-1064520.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
run-salt-master-as-dedicated-salt-user.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
salt-tmpfiles.d - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
salt.changes - Fix cloud minion configuration for multiple masters (bsc#1229109) 2024-08-29 12:04:40 +00:00
salt.spec - Fix cloud minion configuration for multiple masters (bsc#1229109) 2024-08-29 12:04:40 +00:00
save-log-to-logfile-with-docker.build.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
several-fixes-for-tests-to-avoid-errors-and-failures.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
skip-certain-tests-if-necessary-and-mark-some-flaky-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
skip-more-tests-related-to-old-openssl-algorithms.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
skip-package-names-without-colon-bsc-1208691-578.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
skip-tests-for-unsupported-algorithm-on-old-openssl-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
some-more-small-tests-fixes-enhancements-661.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
speed-up-salt.matcher.confirm_top-by-using-__context.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
switch-firewalld-state-to-use-change_interface.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
switch-oscap-encoding-to-utf-8-639.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
temporary-fix-extend-the-whitelist-of-allowed-comman.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
test_vultrpy-adjust-test-expectation-to-prevent-fail.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
transactional_update.conf - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
travis.yml - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
update-__pillar__-during-pillar_refresh.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
update-documentation.sh - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
update-target-fix-for-salt-ssh-to-process-targets-li.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
use-adler32-algorithm-to-compute-string-checksums.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
use-rlock-to-avoid-deadlocks-in-salt-ssh.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
use-salt-bundle-in-dockermod.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
use-salt-call-from-salt-bundle-with-transactional_up.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
v3006.0.tar.gz - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
write-salt-version-before-building-when-using-with-s.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
x509-fixes-111.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
zypper-pkgrepo-alreadyconfigured-585.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00
zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch - Use Pygit2 id instead of deprecated oid in gitfs 2024-08-21 14:57:31 +00:00

Salt-master as non-root user
============================

With this version of salt the salt-master will run as salt user.

Why an extra user
=================

While the current setup runs the master as root user, this is considered a security issue
and not in line with the other configuration management tools (eg. puppet) which runs as a
dedicated user. 

How can I undo the change
=========================

If you would like to make the change before you can do the following steps manually:
1. change the user parameter in the master configuration
   user: root
2. update the file permissions:
   as root: chown -R root /etc/salt /var/cache/salt /var/log/salt /var/run/salt
3. restart the salt-master daemon:
   as root: rcsalt-master restart or systemctl restart salt-master

NOTE
====

Running the salt-master daemon as a root user is considers by some a security risk, but
running as root, enables the pam external auth system, as this system needs root access to check authentication.

For more information:
http://docs.saltstack.com/en/latest/ref/configuration/nonroot.html