mig5/enroll
1
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Activity Actions

jinjaturtle tests can run on rpm via git
Some checks failed
CI / test (push) Successful in 1m21s
Details
CI / test (almalinux, docker.io/library/almalinux:9, python3.11) (push) Failing after 2m40s
Details
CI / test (debian, docker.io/library/debian:13, python3) (push) Failing after 3m38s
Details
Lint / test (push) Successful in 47s
Details

Browse source
This commit is contained in:
Miguel Jacq 2026-06-30 09:26:34 +10:00
parent 0fd722281e
commit 6d55ac6cc5
Signed by: mig5
GPG key ID: 03906B4110AAD3B8
2 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
SECURITY.md
View file

@ -42,7 +42,7 @@ These measures are defense-in-depth. They are intended to reduce the chance of a
The following are generally out of scope and should not be reported as Enroll vulnerabilities unless they also bypass one of Enroll’s explicit hardening mechanisms: The following are generally out of scope and should not be reported as Enroll vulnerabilities unless they also bypass one of Enroll’s explicit hardening mechanisms:
* A malicious local user who can already control the root user’s command line, shell environment, config file, `PATH`, SSH config, working directory, or invoked binaries. * A malicious local user who can already control the root user’s command line, shell environment, config file, `PATH`, `XDG_CONFIG_HOME`, SSH config, working directory, or invoked binaries.
* A root user loading an `enroll.ini` file whose contents intentionally request dangerous behavior. * A root user loading an `enroll.ini` file whose contents intentionally request dangerous behavior.
* A root user passing `--dangerous` and then observing that Enroll may collect sensitive information. * A root user passing `--dangerous` and then observing that Enroll may collect sensitive information.
* A root user passing `--assume-safe-path` and then observing that Enroll does not prompt about `PATH` safety. * A root user passing `--assume-safe-path` and then observing that Enroll does not prompt about `PATH` safety.

5
tests.sh
View file

@ -422,11 +422,6 @@ run_ansible_jinjaturtle_variant() {
} }
run_jinjaturtle_manifest_tests() { run_jinjaturtle_manifest_tests() {
if is_rpm_family ; then
section "JinjaTurtle integration matrix"
printf 'Skipping JinjaTurtle package integration on RPM-family CI;\n'
return
fi
ensure_jinjaturtle ensure_jinjaturtle
require_cmd jinjaturtle "Install JinjaTurtle before running the JinjaTurtle integration matrix." require_cmd jinjaturtle "Install JinjaTurtle before running the JinjaTurtle integration matrix."