Skip to content

git dependencies fail with salt 3005.5+ #348

@sblaisot

Description

@sblaisot

Salt 3005.5 and 3006.6 introduced a fix for CVE-2024-22231 and CVE-2024-22232 by refusing to serve files outside of file root.

Howevec kitchen-salt provisionner get git formulas dependencies in /usr/share/salt-formulas/env} ans symlink them in fileroot so salt cannot find the dependency formulas anymore.

Each test requiring a git dependency now fail under salt 3005.5+ or 3006.6+

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions