Skip to content

[release-4.18] Add an agent flag to disable installing boatloaders - #486

Open
sunku5494 wants to merge 1 commit into
openshift:release-4.18from
sunku5494:CVE-2026-43003-4.18
Open

[release-4.18] Add an agent flag to disable installing boatloaders#486
sunku5494 wants to merge 1 commit into
openshift:release-4.18from
sunku5494:CVE-2026-43003-4.18

Conversation

@sunku5494

Copy link
Copy Markdown

Pipes the new agent flag (enable_bios_bootloader_install) to agents. This flag disables bootloader install (calls to grub-install) by default for security reasons.

Part of mitigation of CVE-2026-43003.

Related-Bug: 2148310
Change-Id: I694bbe121e09e7e0b2e6c5ab3746f7943385190a

(cherry picked from commit e38ae0c) (cherry picked from commit 9a8d91a) (cherry picked from commit 0fb6ca6) (cherry picked from commit 008be86) (cherry picked from commit b07e9d0)

Pipes the new agent flag (enable_bios_bootloader_install) to agents.
This flag disables bootloader install (calls to grub-install) by default
for security reasons.

Part of mitigation of CVE-2026-43003.

Related-Bug: 2148310
Change-Id: I694bbe121e09e7e0b2e6c5ab3746f7943385190a
Signed-off-by: Clif Houck <me@clifhouck.com>
(cherry picked from commit e38ae0c)
(cherry picked from commit 9a8d91a)
(cherry picked from commit 0fb6ca6)
(cherry picked from commit 008be86)
(cherry picked from commit b07e9d0)
Signed-off-by: Venkata Charan Sunku <vsunku@redhat.com>
@openshift-ci
openshift-ci Bot requested review from dtantsur and iurygregory August 19, 2026 07:59
@openshift-ci

openshift-ci Bot commented Aug 19, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: sunku5494
Once this PR has been reviewed and has the lgtm label, please assign elfosardo for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Aug 19, 2026

Copy link
Copy Markdown

@sunku5494: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant