diff options
author | Eli Young <elyscape@gmail.com> | 2015-05-28 18:15:05 -0700 |
---|---|---|
committer | Eli Young <elyscape@gmail.com> | 2015-06-01 16:19:07 -0700 |
commit | 601f681787c8d6c02bb3566b8cefde289377be0e (patch) | |
tree | 1f6ce54256909aafc643bf89ee2b203a58e70d80 /spec/acceptance/fqdn_rotate_spec.rb | |
parent | a383705fdb133978e53503b7e01012367fac139d (diff) | |
download | puppet-stdlib-601f681787c8d6c02bb3566b8cefde289377be0e.tar.gz puppet-stdlib-601f681787c8d6c02bb3566b8cefde289377be0e.tar.bz2 |
fqdn_rotate: Don't use the value itself as part of the random seed
Previously, the random number generator was seeded with the array or
string to be rotated in addition to any values specifically provided for
seeding. This behavior is potentially insecure in that it allows an
attacker who can modify the source data to choose the post-shuffle
order.
Diffstat (limited to 'spec/acceptance/fqdn_rotate_spec.rb')
-rwxr-xr-x | spec/acceptance/fqdn_rotate_spec.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/spec/acceptance/fqdn_rotate_spec.rb b/spec/acceptance/fqdn_rotate_spec.rb index 753068b..366d027 100755 --- a/spec/acceptance/fqdn_rotate_spec.rb +++ b/spec/acceptance/fqdn_rotate_spec.rb @@ -36,7 +36,7 @@ describe 'fqdn_rotate function', :unless => UNSUPPORTED_PLATFORMS.include?(fact( EOS apply_manifest(pp, :catch_failures => true) do |r| - expect(r.stdout).to match(/fqdn_rotate is \["c", "d", "a", "b"\]/) + expect(r.stdout).to match(/fqdn_rotate is \["d", "a", "b", "c"\]/) end end end |