Граф коммитов

20 Коммитов

Автор SHA1 Сообщение Дата
Tristan Weir 8c24601740 Update import statements to point to github.com/mozilla/mig/ 2018-07-11 10:11:22 -07:00
Zack Mullaly e8eb90a137 Manually add the extra information to action expiration timestamps that get formatted into strings
This makes the action signing code work with older and newer versions of
the Go compiler.
2018-04-06 10:49:13 -04:00
Zack Mullaly 7c929b22fa Fixed format string errors that were blocking make test 2018-02-27 15:15:02 -05:00
Aaron Meihm 034de6f3da style related code cleanup in mig top-level package
Fix a bunch of godoc issues, removes exchange and queue names which were
no longer being utilized, and the GenB32ID function which was also not
being used. Renames some constant values to remove mixture of all caps
and underscores in constants.
2017-10-26 15:55:48 -05:00
Aaron Meihm 1aef3caaa5 add tests around Action.VerifyACL 2017-10-25 14:19:07 -05:00
Aaron Meihm be74b4d61d return error in Action.VerifySignatures if action contains no signatures 2017-10-25 14:19:07 -05:00
Aaron Meihm 8a1194722d simplify ACL type and remove Permission, fix authorization bypass
This change removes the Permission type, and modifies ACL to simply be a
map of a given module name and the authorization specification.

It was previously stored as a list of ACL types, with each type being a
map which was not required.

This also fixes a bug in authorization, where an action would be
authorized if the first operation validated against the ACL. This means,
it was possible if an action contained more than one operation, an
investigator could be authorized for execution if the first module
matched the ACL. Note that for this to happen, the first operation
checked would need to be authorized and in general deployments this does
not have a significant impact.

Resolves #394
2017-10-25 14:19:07 -05:00
Aaron Meihm 099926ee7d [minor/bug] in SignAction, remove temporary file
Closes #348
2017-04-25 10:38:02 -05:00
jboyer2012 9ad057e229 [minor] Add ONLYVERIFYPUBKEY global to bypass verification of ACLs if set to true. 2017-02-06 18:22:07 -05:00
jboyer2012 67db2cab5d [minor] Add VERIFYACLs global to bypass verification of ACLs if set to false. 2017-02-06 17:49:59 -05:00
Julien Vehent 5c6db6861d
[minor] Remove single signer check from action.go 2016-09-24 22:23:39 -04:00
Aaron Meihm a85b771a94 [medium] enhance support for multiple action signatures
Adds functionality to mig-cmd in addition to various bug fixes to
correctly support multiple signature verification with ACL module
weights.

This implementation is rudimentary in the sense it gives an investigator
the ability to output a signed action, which can be handed off to
another investigation for application of a second signature and
execution in the system.
2016-09-23 11:39:42 -05:00
Aaron Meihm 1d73fab48e [medium] move compression apply into client package 2016-01-22 14:14:17 -06:00
Aaron Meihm 853d722a83 [medium] introduce optional action compression between client and agent 2016-01-22 10:33:52 -06:00
Julien Vehent 765db7647f Merge pull request #87 from mozilla/fixsearch20150919
Fix various DB Query issues
2015-09-23 13:03:44 -04:00
Julien Vehent 7e4d77c28f [minor] cleanup search code in db/console/api/scheduler 2015-09-23 12:57:39 -04:00
Aaron Meihm 376d1acc7d [minor] add -a flag for mig-cmd that can be used to print action json 2015-09-15 12:22:43 -05:00
Julien Vehent 200a5a6164 [doc] add newline after license header to ignore it in godoc 2015-08-27 10:41:13 -04:00
Julien Vehent 91928a9fcd [minor] add import comment to packages declarations 2015-08-26 14:15:40 -04:00
Julien Vehent e9aa7febf9 [major] reorganize repository structure for `go get mig.ninja/mig`
This is a major change to the structure of the repository and the Makefile,
but a minor change in terms of functionalities. It simply changes the structure
of the directories to be compliant with Go's idiomatic build methods.

I also bought the domain `mig.ninja` and will now be using that as
a standard import path for everything. The magic to serve everything
under mig.ninja/mig will be documented elsewhere.
2015-08-25 18:01:22 -04:00