Hi,
i was trying to install an external .opm-package withe the Web UI
Apparently since 6.0.9 they have a new feature, to disable external package installation by default.
(From the 6.0.9 Changelog:
What’s New
Updated translations, thanks to all translators.
Added improvements to the support data collector plugins.
Enhanced package manager:
Not verified packages can’t be installed by default (via GUI + OTRS console).
Added sysconfig setting ‚Package::AllowNotVerifiedPackages‘ to allow installation of not verified packages (disabled by default).
Display a notification if setting ‚Package::AllowNotVerifiedPackages‘ is active.
)
When I try to change the setting on the Web UI nothing comes up.
And directly on the server, the only setting I cound find was the GET-method for checking in Kernel::Config wether the setting was enabled or disabled inside the Package.pm file.
See:
I don't know if the GET-method checks the Config.pm and if it's safe to just add the line Package::AllowNotVerifiedPackages = true
to make it happen. So i figured, I'd better ask for your input, since this OTRS is active in production and I don't wanna mess it up
Thanks in advance for your help!
Where to change the Package::AllowNotVerifiedPackages setting?
Moderator: crythias
-
- Znuny newbie
- Posts: 11
- Joined: 23 Mar 2018, 10:45
- Znuny Version: 6.0.6
Where to change the Package::AllowNotVerifiedPackages setting?
Last edited by kaiserchrss on 31 Jul 2018, 10:48, edited 1 time in total.
Re: Where to change the Package::AllowNotVerifiedPackages setting?
search for Package::AllowNotVerifiedPackages in System Configuration
Please note this is a security setting targeted on CVE-2018-7567. So I assume that you analyzed and understood the code of the packages you want to install.
Please note this is a security setting targeted on CVE-2018-7567. So I assume that you analyzed and understood the code of the packages you want to install.
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master
Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
"Testing": ((OTRS Community Edition)) and git Master
Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
-
- Znuny newbie
- Posts: 11
- Joined: 23 Mar 2018, 10:45
- Znuny Version: 6.0.6
Re: Where to change the Package::AllowNotVerifiedPackages setting?
>>search for Package::AllowNotVerifiedPackages in System Configuration
Thanks but this doesn't get me any results:
Thanks but this doesn't get me any results:
Re: Where to change the Package::AllowNotVerifiedPackages setting?
Please run (as OTRS user)
bin/otrs.Console.pl Maint::Config::Sync
bin/otrs.Console.pl Maint::Config::Rebuild
bin/otrs.Console.pl Maint::Config::Sync
bin/otrs.Console.pl Maint::Config::Rebuild
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master
Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
"Testing": ((OTRS Community Edition)) and git Master
Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
-
- Znuny newbie
- Posts: 11
- Joined: 23 Mar 2018, 10:45
- Znuny Version: 6.0.6
Re: Where to change the Package::AllowNotVerifiedPackages setting?
Thank you. It's working now!
-
- Administrator
- Posts: 3934
- Joined: 18 Dec 2007, 12:23
- Znuny Version: Znuny and Znuny LTS
- Real Name: Roy Kaldung
- Company: Znuny
- Contact:
Re: Where to change the Package::AllowNotVerifiedPackages setting?
Hi,
Just use
- Roy
Just use
Code: Select all
bin/otrs.Console.pl Admin::Config::Update --setting-name Package::Package::AllowNotVerifiedPackages --value 1
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO
Use a test system - always.
Do you need professional services? Check out https://www.znuny.com/
Do you want to contribute or want to know where it goes ?
Use a test system - always.
Do you need professional services? Check out https://www.znuny.com/
Do you want to contribute or want to know where it goes ?