saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-16 09:40:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Updated man pages, version to 2015.8.4, added CVE 2016-1866 to release notes

Browse source
This commit is contained in:
Jacob Hammons 2016-02-02 13:04:34 -07:00
parent d79efe8991
commit fca119fe80
16 changed files with 71912 additions and 8963 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/man/salt-api.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-API" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-API" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-api \- salt-api Command
.
@ -109,6 +109,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

8
doc/man/salt-call.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CALL" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-CALL" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-call \- salt-call Documentation
.
@ -45,8 +45,8 @@ salt\-call [options]
.sp
The salt\-call command is used to run module functions locally on a minion
instead of executing them from the master. Salt\-call is used to run a
\fIStandalone Minion\fP, and was originally
created for \fItroubleshooting\fP\&.
Standalone Minion, and was originally
created for troubleshooting\&.
.sp
The Salt Master is contacted to retrieve state files and other resources
during execution unless the \fB\-\-local\fP option is specified.
@ -253,6 +253,6 @@ changes and success and \fByellow\fP denotes a expected future change in configu
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-cloud.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CLOUD" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-CLOUD" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-cloud \- Salt Cloud Command
.
@ -376,6 +376,6 @@ salt\-cloud \-m /path/to/cloud.map \-Q
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

6
doc/man/salt-cp.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CP" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-CP" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-cp \- salt-cp Documentation
.
@ -53,7 +53,7 @@ Salt copy copies a local file out to all of the Salt minions matched by the
given target.
.sp
Note: salt\-cp uses salt\(aqs publishing mechanism. This means the privacy of the
contents of the file on the wire are completely dependant upon the transport
contents of the file on the wire is completely dependent upon the transport
in use. In addition, if the salt\-master is running with debug logging it is
possible that the contents of the file will be logged to disk.
.SH OPTIONS
@ -163,6 +163,6 @@ file.
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

30
doc/man/salt-key.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-KEY" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-KEY" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-key \- salt-key Documentation
.
@ -45,6 +45,32 @@ salt\-key [ options ]
.sp
Salt\-key executes simple management of Salt server public keys used for
authentication.
.sp
On initial connection, a Salt minion sends its public key to the Salt
master. This key must be accepted using the \fBsalt\-key\fP command on the
Salt master.
.sp
Salt minion keys can be in one of the following states:
.INDENT 0.0
.IP \(bu 2
\fBunaccepted\fP: key is waiting to be accepted.
.IP \(bu 2
\fBaccepted\fP: key was accepted and the minion can communicate with the Salt
master.
.IP \(bu 2
\fBrejected\fP: key was rejected using the \fBsalt\-key\fP command. In
this state the minion does not receive any communication from the Salt
master.
.IP \(bu 2
\fBdenied\fP: key was rejected automatically by the Salt master.
This occurs when a minion has a duplicate ID, or when a minion was rebuilt or
had new keys generated and the previous key was not deleted from the Salt
master. In this state the minion does not receive any communication from the
Salt master.
.UNINDENT
.sp
To change the state of a minion key, use \fB\-d\fP to delete the key and then
accept or reject the key.
.SH OPTIONS
.INDENT 0.0
.TP
@ -302,6 +328,6 @@ Auto\-create a signing key\-pair if it does not yet exist
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-master.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-MASTER" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-MASTER" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-master \- salt-master Documentation
.
@ -114,6 +114,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-minion.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-MINION" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-MINION" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-minion \- salt-minion Documentation
.
@ -115,6 +115,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-proxy.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-PROXY" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-PROXY" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-proxy \- salt-proxy Documentation
.
@ -123,6 +123,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-run.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-RUN" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-RUN" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-run \- salt-run Documentation
.
@ -120,6 +120,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

15
doc/man/salt-ssh.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-SSH" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-SSH" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-ssh \- salt-ssh Documentation
.
@ -91,8 +91,15 @@ is 25.
.INDENT 0.0
.TP
.B \-i, \-\-ignore\-host\-keys
Ignore the ssh host keys which by default are honored and connections
would ask for approval.
Disables StrictHostKeyChecking to relax acceptance of new and unknown
host keys.
.UNINDENT
.INDENT 0.0
.TP
.B \-\-no\-host\-keys
Fully ignores ssh host keys which by default are honored and connections
would ask for approval. Useful if the host key of a remote server has
changed and would still error with \-\-ignore\-host\-keys.
.UNINDENT
.INDENT 0.0
.TP
@ -268,6 +275,6 @@ changes and success and \fByellow\fP denotes a expected future change in configu
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-syndic.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-SYNDIC" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-SYNDIC" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-syndic \- salt-syndic Documentation
.
@ -116,6 +116,6 @@ Logfile logging log level. One of \fBall\fP, \fBgarbage\fP, \fBtrace\fP,
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt-unity.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-UNITY" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT-UNITY" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt-unity \- salt-unity Command
.
@ -64,6 +64,6 @@ invokes that script.
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

4
doc/man/salt.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SALT" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
salt \- salt
.
@ -329,6 +329,6 @@ changes and success and \fByellow\fP denotes a expected future change in configu
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

80767
doc/man/salt.7
View file

File diff suppressed because it is too large Load diff

4
doc/man/spm.1
View file

@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SPM" "1" "September 01, 2015" "2015.8.0" "Salt"
.TH "SPM" "1" "February 01, 2016" "2015.8.0" "Salt"
.SH NAME
spm \- Salt Package Manager Command
.
@ -138,6 +138,6 @@ in that directory which describes them.
.SH AUTHOR
Thomas S. Hatch <thatch45@gmail.com> and many others, please see the Authors file
.SH COPYRIGHT
2015 SaltStack, Inc.
2016 SaltStack, Inc.
.\" Generated by docutils manpage writer.
.

9
doc/topics/releases/2015.8.4.rst
View file

@ -2,6 +2,15 @@
Salt 2015.8.4 Release Notes
===========================
Security Fix
============
CVE-2016-1866: Improper handling of clear messages on the minion, which could result in executing commands not sent by the master.
This issue affects only the 2015.8.x releases of Salt. In order for an attacker to use this attack vector, they would have to execute a successful attack on an existing TCP connection between minion and master on the pub port. It does not allow an external attacker to obtain the shared secret or decrypt any encrypted traffic between minion and master.
We recommend everyone upgrade to 2015.8.4 as soon as possible.
Core Changes
============