Merge pull request #26 from treydock/squid-urn

Add work around for OSG-SEC-2019-11-11
treydock · Nov 11, 2019 · 823d6f9 · 823d6f9
2 parents bba18d8 + 17b38d8
commit 823d6f9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/spec/classes/osg_squid_spec.rb b/spec/classes/osg_squid_spec.rb
@@ -89,6 +89,8 @@
           'uncomment("acl MAJOR_CVMFS")',
           'insertline("^# http_access deny !RESTRICT_DEST", "http_access allow MAJOR_CVMFS")',
           'insertline("^# max_filedescriptors 0", "max_filedescriptors 0")',
+          'insertline("# INSERT YOUR OWN RULE", "acl URN proto URN")',
+          'insertline("# INSERT YOUR OWN RULE", "http_access deny URN")',
           'print',
           '}\'',
         ])

diff --git a/templates/squid/customize.sh.erb b/templates/squid/customize.sh.erb
@@ -20,5 +20,7 @@ uncomment("acl MAJOR_CVMFS")
 insertline("^# http_access deny !RESTRICT_DEST", "http_access allow MAJOR_CVMFS")
 <%- end -%>
 insertline("^# max_filedescriptors 0", "max_filedescriptors <%= @max_filedescriptors %>")
+insertline("# INSERT YOUR OWN RULE", "acl URN proto URN")
+insertline("# INSERT YOUR OWN RULE", "http_access deny URN")
 print
 }'