summaryrefslogtreecommitdiff
path: root/cloudinit/sources/DataSourceOVF.py
diff options
context:
space:
mode:
authorXiaofeng Wang <xiaofengw@vmware.com>2019-10-31 15:15:51 +0000
committerServer Team CI Bot <josh.powers+server-team-bot@canonical.com>2019-10-31 15:15:51 +0000
commita61ee02a50eb21954c114e01d2d042916bb2dc14 (patch)
tree35d5b3231afa524494cf1c34607e3685a519b705 /cloudinit/sources/DataSourceOVF.py
parentd3e71b5e843edf73eb7da511a032d987e314bd69 (diff)
downloadvyos-cloud-init-a61ee02a50eb21954c114e01d2d042916bb2dc14.tar.gz
vyos-cloud-init-a61ee02a50eb21954c114e01d2d042916bb2dc14.zip
OVF: disable custom script execution by default
For security concern, we disable the custom script by default.If a custom script is provided, stop customization unless the custom script is explicitly enabled by tools config.
Diffstat (limited to 'cloudinit/sources/DataSourceOVF.py')
-rw-r--r--cloudinit/sources/DataSourceOVF.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/cloudinit/sources/DataSourceOVF.py b/cloudinit/sources/DataSourceOVF.py
index e7794aab..896841e3 100644
--- a/cloudinit/sources/DataSourceOVF.py
+++ b/cloudinit/sources/DataSourceOVF.py
@@ -155,8 +155,8 @@ class DataSourceOVF(sources.DataSource):
custScriptConfig = get_tools_config(
CONFGROUPNAME_GUESTCUSTOMIZATION,
GUESTCUSTOMIZATION_ENABLE_CUST_SCRIPTS,
- "true")
- if custScriptConfig.lower() == "false":
+ "false")
+ if custScriptConfig.lower() != "true":
# Update the customization status if there is a
# custom script is disabled
if special_customization and customscript: