Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions cmd/sansshell-server/default-policy.rego
Original file line number Diff line number Diff line change
Expand Up @@ -121,3 +121,14 @@ allow {
input.message.zero = true
input.message.remove = true
}

# Allow fdbbackup commands
allow {
input.type = "Exec.ExecRequest"
input.message.command = "/usr/sbin/fdbbackup"
}

# Allow all FDBBackup service methods
allow {
startswith(input.method, "/Fdb.FDBBackup/")
}
1 change: 1 addition & 0 deletions cmd/sansshell-server/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,7 @@ func init() {
*fdbCLIEnvList.Target = append(*fdbCLIEnvList.Target, "") // To set a default
flag.Var(&fdbCLIEnvList, "fdbcli-env-list", "List of environment variable names (separated by comma) to retain before fork/exec'ing fdbcli")
flag.StringVar(&fdbserver.FDBMoveOrchestrator, "fdb-move-orchestrator", "/usr/bin/fdb_move_orchestrator.py", "Path to python data movement script.")
flag.StringVar(&fdbserver.FDBBackup, "fdbbackup", "/usr/sbin/fdbbackup", "Path to fdbbackup binary.")

flag.StringVar(&mtlsFlags.ClientCertFile, "client-cert", mtlsFlags.ClientCertFile, "Path to this client's x509 cert, PEM format")
flag.StringVar(&mtlsFlags.ClientKeyFile, "client-key", mtlsFlags.ClientKeyFile, "Path to this client's key")
Expand Down
Loading