Skip to content

git dependencies fail with salt 3005.5+ #348

@sblaisot

Description

@sblaisot

Salt 3005.5 and 3006.6 introduced a fix for CVE-2024-22231 and CVE-2024-22232 by refusing to serve files outside of file root.

Howevec kitchen-salt provisionner get git formulas dependencies in /usr/share/salt-formulas/env} ans symlink them in fileroot so salt cannot find the dependency formulas anymore.

Each test requiring a git dependency now fail under salt 3005.5+ or 3006.6+

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions