Where to change the Package::AllowNotVerifiedPackages setting?

Moderator: crythias

Post Reply
kaiserchrss
Znuny newbie
Posts: 11
Joined: 23 Mar 2018, 10:45
Znuny Version: 6.0.6

Where to change the Package::AllowNotVerifiedPackages setting?

Post by kaiserchrss »

Hi,

i was trying to install an external .opm-package withe the Web UI

Apparently since 6.0.9 they have a new feature, to disable external package installation by default.

(From the 6.0.9 Changelog:

What’s New

Updated translations, thanks to all translators.
Added improvements to the support data collector plugins.
Enhanced package manager:
Not verified packages can’t be installed by default (via GUI + OTRS console).
Added sysconfig setting ‚Package::AllowNotVerifiedPackages‘ to allow installation of not verified packages (disabled by default).
Display a notification if setting ‚Package::AllowNotVerifiedPackages‘ is active.



)

Image

When I try to change the setting on the Web UI nothing comes up.

Image

And directly on the server, the only setting I cound find was the GET-method for checking in Kernel::Config wether the setting was enabled or disabled inside the Package.pm file.
See:
Image


I don't know if the GET-method checks the Config.pm and if it's safe to just add the line Package::AllowNotVerifiedPackages = true
to make it happen. So i figured, I'd better ask for your input, since this OTRS is active in production and I don't wanna mess it up :)

Thanks in advance for your help!
Last edited by kaiserchrss on 31 Jul 2018, 10:48, edited 1 time in total.
jojo
Znuny guru
Posts: 15019
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Where to change the Package::AllowNotVerifiedPackages setting?

Post by jojo »

search for Package::AllowNotVerifiedPackages in System Configuration

Please note this is a security setting targeted on CVE-2018-7567. So I assume that you analyzed and understood the code of the packages you want to install.
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
kaiserchrss
Znuny newbie
Posts: 11
Joined: 23 Mar 2018, 10:45
Znuny Version: 6.0.6

Re: Where to change the Package::AllowNotVerifiedPackages setting?

Post by kaiserchrss »

>>search for Package::AllowNotVerifiedPackages in System Configuration

Thanks but this doesn't get me any results:
Image
jojo
Znuny guru
Posts: 15019
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Where to change the Package::AllowNotVerifiedPackages setting?

Post by jojo »

Please run (as OTRS user)
bin/otrs.Console.pl Maint::Config::Sync
bin/otrs.Console.pl Maint::Config::Rebuild
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
kaiserchrss
Znuny newbie
Posts: 11
Joined: 23 Mar 2018, 10:45
Znuny Version: 6.0.6

Re: Where to change the Package::AllowNotVerifiedPackages setting?

Post by kaiserchrss »

Thank you. It's working now!

Image

Image
root
Administrator
Posts: 3934
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Where to change the Package::AllowNotVerifiedPackages setting?

Post by root »

Hi,

Just use

Code: Select all

bin/otrs.Console.pl Admin::Config::Update --setting-name Package::Package::AllowNotVerifiedPackages --value 1
- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
Post Reply