3 ms·
https://netmaker.org/_images/node-details.png https://netmaker.org/_images/node-details.png Shown on the marketing pages, the controller supports pushing confi
by RL_Quine 5y ago
https://netmaker.org/_images/node-details.png https://netmaker.org/_images/node-details.png
Shown on the marketing pages, the controller supports pushing configurations which include commands for `postup` and `postdown`; does this mean that it implicitly has root code execution on every participant in the network? I don't think it would be designed like that, but I'm a bit confused how this could be working without introducing that as a concern.
- afeiszli 5y agoYou're right, and that's definitely a concern for a lot of users. The idea is you should be able to set any WireGuard configuration file setting from the server, including PostUp and PostDown, which are just arbitrary commands. However, we're adding a switch for this pretty soon which will allow disabling the edit-ability of those fields.
- RL_Quine 5y agoIt should probably be loudly default-disabled or outright removed, that's a very, very unexpected feature. It's an unprecedented tool for moving laterally and gaining gigantic amount of access within internal systems. Nobody could possibly build a secure network around a VPN where the controller can bypass all isolation, containerization, and all access controls through a web interface on another machine.
- gunapologist99 5y agoAgreed. That's a bit terrifying!
- afeiszli 5y agoTotally fair. You've convinced us to put that into our next release. While that's a big flaw it's a simple fix, and it should be in the code base by the end of the week.
- RL_Quine 5y agoWell done.
- ec109685 5y agoThe contrast on that image is really low, so it’s hard to read.