Only bind SAIO daemons to localhost
The SAIO configs have no default bind_ip setting configured which causes them to listen on all available IP addresses. This can be dangerous on a test machine with public interfaces, especially with the default passwords set. Its reasonable to choose a more restrictive setup, especially in SAIO which uses 127.0.0.1 throughout ring-builder, example commands and the probe tests. Change-Id: I471c49705ce09e07ec7acc07ee42a1e220529b82
This commit is contained in:
parent
c5013783ac
commit
8e9b16a9ea
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/1/node
|
devices = /srv/1/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6012
|
bind_port = 6012
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/2/node
|
devices = /srv/2/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6022
|
bind_port = 6022
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/3/node
|
devices = /srv/3/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6032
|
bind_port = 6032
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/4/node
|
devices = /srv/4/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6042
|
bind_port = 6042
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/1/node
|
devices = /srv/1/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6011
|
bind_port = 6011
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/2/node
|
devices = /srv/2/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6021
|
bind_port = 6021
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/3/node
|
devices = /srv/3/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6031
|
bind_port = 6031
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/4/node
|
devices = /srv/4/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6041
|
bind_port = 6041
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/1/node
|
devices = /srv/1/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6010
|
bind_port = 6010
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/2/node
|
devices = /srv/2/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6020
|
bind_port = 6020
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/3/node
|
devices = /srv/3/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6030
|
bind_port = 6030
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -2,6 +2,7 @@
|
|||||||
devices = /srv/4/node
|
devices = /srv/4/node
|
||||||
mount_check = false
|
mount_check = false
|
||||||
disable_fallocate = true
|
disable_fallocate = true
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 6040
|
bind_port = 6040
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
@ -1,4 +1,5 @@
|
|||||||
[DEFAULT]
|
[DEFAULT]
|
||||||
|
bind_ip = 127.0.0.1
|
||||||
bind_port = 8080
|
bind_port = 8080
|
||||||
workers = 1
|
workers = 1
|
||||||
user = <your-user-name>
|
user = <your-user-name>
|
||||||
|
Loading…
Reference in New Issue
Block a user