[1878] in Moira
Re: computers on ACLs?
daemon@ATHENA.MIT.EDU (Dan Winship)
Fri Oct 12 13:33:07 2001
Date: 12 Oct 2001 10:32:34 -0700
Message-ID: <20011012173234.16309.cpmta@c009.snv.cp.net>
Content-Type: text/plain
Content-Disposition: inline
Mime-Version: 1.0
To: pbh@MIT.EDU
From: Dan Winship <danw@MIT.EDU>
Cc: pismere-team@MIT.EDU, moiradev@MIT.EDU
X-Sent-From: danw@ihtfp.net
> As soon as
> a host has been deleted from Moira, someone else can create a new host using
> the same name. If the hostname was a member of a group or list which is used
> as an ACL there would be a chance that inappropriate access could be
> granted.
Not a problem; list memberships aren't stored by name, they're stored by
moira-internal ids. So Moira wouldn't care that the two hosts had the same
name, because they'd have different mach_ids, so the new machine wouldn't
be in the old machine's groups.
For that matter, you're not supposed to be able to delete an object that
still has references to it elsewhere in the database, so you (or your
moira client at least) would have to explicitly remove it from the ACL
before you could delete it. So even if the new machine *did* get the same
mach_id as the old one (which "can't happen"), it still wouldn't be a
problem, because it would already be off the ACL.
-- Dan
