From f7b31d57eeaff8fba199f47a0079a6a659315264 Mon Sep 17 00:00:00 2001 From: Songhua Hu Date: Thu, 18 Nov 2021 21:18:40 -0800 Subject: [PATCH] Fix security vulnerability in DAEMON_ALLOW_DOWNLOAD_BINARIES setting --- roles/juno/files/cosmovisor.service | 2 +- roles/sifchain/files/cosmovisor.service | 2 +- roles/sifchain/files/profile | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/roles/juno/files/cosmovisor.service b/roles/juno/files/cosmovisor.service index d1ef01fe..7230ee84 100644 --- a/roles/juno/files/cosmovisor.service +++ b/roles/juno/files/cosmovisor.service @@ -10,7 +10,7 @@ RestartSec=3 LimitNOFILE=4096 Environment="DAEMON_NAME=junod" Environment="DAEMON_HOME=/home/ubuntu/.juno" -Environment="DAEMON_ALLOW_DOWNLOAD_BINARIES=true" +Environment="DAEMON_ALLOW_DOWNLOAD_BINARIES=false" Environment="DAEMON_RESTART_AFTER_UPGRADE=true" Environment="DAEMON_LOG_BUFFER_SIZE=512" diff --git a/roles/sifchain/files/cosmovisor.service b/roles/sifchain/files/cosmovisor.service index 1766e5b0..36c8b8d6 100644 --- a/roles/sifchain/files/cosmovisor.service +++ b/roles/sifchain/files/cosmovisor.service @@ -10,7 +10,7 @@ RestartSec=3 LimitNOFILE=4096 Environment="DAEMON_NAME=sifnoded" Environment="DAEMON_HOME=/home/ubuntu/.sifnoded" -Environment="DAEMON_ALLOW_DOWNLOAD_BINARIES=true" +Environment="DAEMON_ALLOW_DOWNLOAD_BINARIES=false" Environment="DAEMON_RESTART_AFTER_UPGRADE=true" Environment="DAEMON_LOG_BUFFER_SIZE=512" diff --git a/roles/sifchain/files/profile b/roles/sifchain/files/profile index c29f9968..437e47fc 100644 --- a/roles/sifchain/files/profile +++ b/roles/sifchain/files/profile @@ -23,5 +23,5 @@ export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin export DAEMON_NAME=sifnoded export DAEMON_HOME=$HOME/.sifnoded export DAEMON_RESTART_AFTER_UPGRADE=true -export DAEMON_ALLOW_DOWNLOAD_BINARIES=true +export DAEMON_ALLOW_DOWNLOAD_BINARIES=false export UNSAFE_SKIP_BACKUP=true \ No newline at end of file