Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FIPS should prompt for confirmation when enabling #1031

Closed
4 of 5 tasks
blackboxsw opened this issue Apr 16, 2020 · 0 comments · Fixed by #1046
Closed
4 of 5 tasks

FIPS should prompt for confirmation when enabling #1031

blackboxsw opened this issue Apr 16, 2020 · 0 comments · Fixed by #1046
Milestone
Xenial & Bionic

Comments

@blackboxsw
Copy link
Collaborator

blackboxsw commented Apr 16, 2020 •
edited
Loading

Checklist;

  • Allow --assume-yes param on the CLI to avoid such prompts
  • Prompt ua enable fips
    Installation of additional packages are required to make this system FIPS compliant
    Are you sure? (y/n)
  • Prompt ua disable fips*
    This will disable access to certified FIPS packages
    Are you sure? (y/n)
  • Prompt ua enable fips-updates
    This system will NOT be considered FIPS certified, but will include security and bug fixes to the FIPS packages.
    Are you sure? (y/n)
  • Message after ua disable fips-*
    A reboot is required to complete the disable process
@blackboxsw blackboxsw added this to the Xenial & Bionic milestone Apr 16, 2020
@blackboxsw blackboxsw mentioned this issue Apr 18, 2020
Merged
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 18, 2020
@blackboxsw
repo: allow for pre_enable messaging interactions
0ac480d 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
@blackboxsw blackboxsw mentioned this issue Apr 18, 2020
Merged
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 18, 2020
@blackboxsw
entitlements: static_affordances runtime instance property
6eae979 
Entitlement.static_affordances need to be a runtime instance property
so that FIPS* can interactively prompt the user with a callable
prior to performing an enable or disable per canonical#1031.

Once the support is there for dynamically calling external functions
FIPS can use util.prompt_for_confirmation before enable or disable
of the service.
@blackboxsw blackboxsw mentioned this issue Apr 18, 2020
Closed
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 18, 2020
@blackboxsw
entitlements: static_affordances runtime instance property
8072c2a 
Entitlement.static_affordances need to be a runtime instance property
so that FIPS* can interactively prompt the user with a callable
prior to performing an enable or disable per canonical#1031.

Once the support is there for dynamically calling external functions
FIPS can use util.prompt_for_confirmation before enable or disable
of the service.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 18, 2020
@blackboxsw
entitlements: static_affordances runtime instance property
3f79582 
Entitlement.static_affordances need to be a runtime instance property
so that FIPS* can interactively prompt the user with a callable
prior to performing an enable or disable per canonical#1031.

Once the support is there for dynamically calling external functions
FIPS can use util.prompt_for_confirmation before enable or disable
of the service.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 18, 2020
@blackboxsw
entitlements: static_affordances runtime instance property
0514f10 
Entitlement.static_affordances need to be a runtime instance property
so that FIPS* can interactively prompt the user with a callable
prior to performing an enable or disable per canonical#1031.

Once the support is there for dynamically calling external functions
FIPS can use util.prompt_for_confirmation before enable or disable
of the service.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 20, 2020
@blackboxsw
repo: allow for pre_enable messaging interactions
f94e120 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 20, 2020
@blackboxsw
repo: allow for pre_enable messaging interactions
14e823d 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 20, 2020
@blackboxsw
repo: allow for pre_enable/pre_disable messaging interactions
714417c 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 22, 2020
@blackboxsw
repo: allow for pre_enable/pre_disable messaging interactions
4413976 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 22, 2020
@blackboxsw
repo: allow for pre_enable/pre_disable messaging interactions
73102fb 
Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for canonical#1031.
powersj pushed a commit that referenced this issue Apr 22, 2020
@blackboxsw
repo: allow for pre_enable messaging interactions (#1036)
9e115d7 
* repo: allow for pre_enable/pre_disable messaging interactions

Consolidate messging hook processing under a single function
handle_message_operations

This is groundwork for FIPS pre-enable and pre-disable custom
messaging and prompts for #1031.

* repo: make messaging an instance property so it can use instance vars
@blackboxsw blackboxsw mentioned this issue Apr 27, 2020
Merged
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 27, 2020
@blackboxsw
fips: add post_disable messaging hooks for fips
77bd21b 
Fixes: canonical#1031
@blackboxsw blackboxsw mentioned this issue Apr 27, 2020
Closed
blackboxsw added a commit that referenced this issue Apr 30, 2020
@blackboxsw
fips: add console prompts during to fips and fips-updates (#1043)
56d9412 
Add confirmation prompt messaging to fips and fips-updates.
 * prompt prior to enabling fips-updates to notify about FIPS non-compliance
 * prompt prior to ua disable fips or fips-updates that disabling access to FIPS packages
 * message that a reboot is required post disable operation of FIPS and FIPS updates to complete disable operation.

One PR to follow to complete the work in #1031.
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue Apr 30, 2020
@blackboxsw
fips: add pre_enable prompt indicating that additional debs required
99d3def 
Addresses the last remaining FIPS-related prompt and message when
running: ua enable fips.

Fixes: canonical#1031
@blackboxsw blackboxsw mentioned this issue Apr 30, 2020
Merged
blackboxsw added a commit that referenced this issue May 1, 2020
@blackboxsw
fips: add pre_enable prompt indicating that additional debs required (#…
1861f5d 
…1046)

Addresses the last remaining FIPS-related prompt and message when
running: ua enable fips.

Fixes: #1031
blackboxsw added a commit to blackboxsw/ubuntu-advantage-client that referenced this issue May 15, 2020
@blackboxsw
entitlements: static_affordances runtime instance property
4800b21 
Entitlement.static_affordances need to be a runtime instance property
so that FIPS* can interactively prompt the user with a callable
prior to performing an enable or disable per canonical#1031.

Once the support is there for dynamically calling external functions
FIPS can use util.prompt_for_confirmation before enable or disable
of the service.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
Xenial & Bionic
1 participant
@blackboxsw