Re: [Condor-users] security problems with Condor 7.6.2

["Smith, Ian" <I.C.Smith@xxxxxxxxxxxxxxx>]

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx [mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Zachary Miller
Sent: 16 August 2011 13:57
To: Condor-Users Mail List
Subject: Re: [Condor-users] security problems with Condor 7.6.2

> An unprivileged user copies the system condor_config file and now has write
> access to their own copy.
> 
> They then edit their own copy to their lliking, point their CONDOR_CONFIG
> environment variable at it and issue a condor_reconfig.
> 
> Would this not change the system configuration ?

it would not change it.  when the condor_master receives the reconfig command,
the user's environment variable has no impact on the condor_master, and it
reads the condor_config from the same place it did before.  its environment is
separate from an arbitrary user's.

Thanks ! I'll sleep much sounder knowing that.

All the best

-ian.