8000 fix(jans-linux-setup): suse setup issues by devrimyatar · Pull Request #9401 · JanssenProject/jans · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix(jans-linux-setup): suse setup issues #9401

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Sep 9, 2024

Conversation

devrimyatar
Copy link
Contributor

closes #9393

  • I confirm that there is no impact on the docs due to the code changes in this PR.

Signed-off-by: Mustafa Baser <mbaser@mail.com>
@devrimyatar devrimyatar added kind-bug Issue or PR is a bug in existing functionality comp-jans-linux-setup Component affected by issue or PR labels Sep 6, 2024
@devrimyatar devrimyatar marked this pull request as draft September 6, 2024 13:51
Copy link
dryrunsecurity bot commented Sep 6, 2024

DryRun Security Summary

The pull request focuses on improving the configuration and setup of the Jans system on Linux, including updating the systemd configuration to set a default timeout for service startup and enhancing the Apache version detection logic in the setup utility to be more robust across different Linux distributions.

Expand for full summary

Summary:

The changes in this pull request are focused on improving the configuration and setup of the Jans system on Linux. The key changes include:

  1. Updating the systemd configuration to set a default timeout of 5 minutes for service startup. This helps ensure the system has sufficient time to start up its services, especially in cases of heavy load or longer service initialization times.
  2. Enhancing the Apache version detection logic in the setup utility to be more robust by checking for multiple Apache-related commands. This makes the detection process more reliable across different Linux distributions.

From an application security perspective, these changes do not introduce any obvious security concerns. The updates are focused on improving the reliability and stability of the system setup process, which is an important aspect of maintaining the overall security posture of the application.

However, it's always crucial to review the entire codebase and deployment process for any potential security vulnerabilities or misconfigurations that could be exploited by attackers. This includes verifying the integrity of downloaded components, ensuring appropriate permissions and privileges are granted, and keeping the application and its dependencies up-to-date with the latest security patches.

Files Changed:

  1. jans-linux-setup/jans_setup/setup_app/installers/jans.py: This file has been updated to check for the systemd configuration file in both /etc and /usr/lib directories, and then modify the file to set the default timeout for service startup to 5 minutes.
  2. jans-linux-setup/jans_setup/setup_app/utils/base.py: The changes in this file focus on improving the determineApacheVersion function, which now checks for multiple Apache-related commands to detect the Apache version installed on the system. The function can also return the full Apache version if requested.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Authn/Authz Analyzer 1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@devrimyatar devrimyatar marked this pull request as ready for review September 9, 2024 12:18
@yuriyz yuriyz enabled auto-merge (squash) September 9, 2024 12:24
@yuriyz yuriyz merged commit 3702661 into main Sep 9, 2024
11 checks passed
@yuriy
8000
z yuriyz deleted the jans-linux-setup-suse-setup-issues-9393 branch September 9, 2024 12:24
Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

Copy link
sonarqubecloud bot commented Sep 9, 2024

yuriyz pushed a commit that referenced this pull request Nov 7, 2024
Signed-off-by: Mustafa Baser <mbaser@mail.com>
Former-commit-id: 3702661
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp-jans-linux-setup Component affected by issue or PR kind-bug Issue or PR is a bug in existing functionality
Projects
None yet
Development

Successfully merging this pull request may close these issues.

fix(jans-setup): unable to run setup.py
3 participants
0