/
githubmirror
/
zulip
Обзор
Документация
Войти
/
githubmirror
/
zulip
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
scripts/setup/generate-rabbitmq-cookie
27 строк
891 B
Alex Vandiver
CVE-2021-43799: Set a secure Erlang cookie.
25 янв 2022, 05:13
25 янв 2022, 05:13
a5496f4
Код
Авторство
О чём код?
#!/usr/bin/env bash # # rabbitmq sets an insecure "magic cookie" which is used for auth; # reset it to be longer. set -eu cookiefile=/var/lib/rabbitmq/.erlang.cookie # If the RabbitMQ distribution cookie is insecure, reset it if [ ! -f "$cookiefile" ] || ! size="$(wc -c "$cookiefile")" || [ "${size%% *}" -le 20 ]; then running=0 if service rabbitmq-server status >/dev/null; then running=1 service rabbitmq-server stop fi echo "Setting a more secure RabbitMQ distribution magic cookie" cookie="$(LC_ALL=C tr -dc '[:alnum:]' </dev/urandom | head -c255)" [ "${#cookie}" -eq 255 ] # make sure tr wasn’t OOM-killed tmpfile="$(mktemp "$cookiefile.XXXXXXXXXX")" chown rabbitmq: "$tmpfile" printf '%s' "$cookie" >"$tmpfile" mv "$tmpfile" "$cookiefile" if [ "$running" == "1" ]; then service rabbitmq-server start fi fi