Skip to content

Prevent unauthorized remote configuration

Maximilian Nitsch requested to merge feature/prevent-remote-configuration into master

The prevention of unauthorized remote configuration is done in two steps:

  1. Bundles received via a CLA that pretend to be the local node itself by using a spoofed EID are discarded
  2. Only configuration messages from local endpoints (source EID == local EID) are processed by the config agent

Step one is mandatory and is applied in all cases. Step two can be disabled at compile time to allow remote configuration in special cases.

Fixes: #32 (closed)

Merge request reports