From 17f9843a9a355b3d72422dd979b1491233aede34 Mon Sep 17 00:00:00 2001 From: Mohit Agrawal Date: Wed, 20 Jun 2018 16:13:00 +0530 Subject: glusterfs: access trusted peer group via remote-host command Problem: In SSL environment the user is able to access volume via remote-host command without adding node in a trusted pool Solution: Change the list of rpc program in glusterd.c at the time of initialization while SSL is enabled > Change-Id: I987e433b639e68ad17b77b6452df1e22dbe0f199 > cherry picked from commit 234d611160840899bcfd5ab1c17a6253673d38ed BUG: 1593525 fixes: bz#1593525 Change-Id: Ice4eda3d8104a4d5641de3cffd7249e46080d48f Signed-off-by: Mohit Agrawal --- xlators/mgmt/glusterd/src/glusterd.c | 5 ----- 1 file changed, 5 deletions(-) diff --git a/xlators/mgmt/glusterd/src/glusterd.c b/xlators/mgmt/glusterd/src/glusterd.c index e071f8f9bc4..316cae4243b 100644 --- a/xlators/mgmt/glusterd/src/glusterd.c +++ b/xlators/mgmt/glusterd/src/glusterd.c @@ -1721,11 +1721,6 @@ init (xlator_t *this) "failed to set ssl-enabled in dict"); goto out; } - /* - * With strong authentication, we can afford to allow - * privileged operations over TCP. - */ - gd_inet_programs[1] = &gd_svc_cli_prog; /* * This is the only place where we want secure_srvr to reflect * the management-plane setting. -- cgit