[Spacewalk-list] Cobbler update breaks Spacewalk 2.2 i386

[Ron Helzer]

The cobbler-2.4.9-1 update recently released in EPEL appears to break
Kickstart profile cloning in Spacewalk 2.2 (at least, on i386).

It seems new security constraints on paths introduced in updated Cobbler
are preventing Spacewalk from cloning Kickstart profiles, with errors like:

INFO | Exception occured: cobbler.cexceptions.CX
INFO | Exception value: 'Invalid kickstart template file location
/var/lib/rhn/kickstarts/wizard/HOSTNAME--1.cfg, it is not inside
/var/lib/cobbler/kickstarts/'
INFO | Exception Info:
  File "/usr/lib/python2.4/site-packages/cobbler/remote.py", line 2084, in
_dispatch
    return method_handle(*params)
   File "/usr/lib/python2.4/site-packages/cobbler/remote.py", line 852, in
modify_profile
    return self.modify_item("profile",object_id,attribute,arg,token)
   File "/usr/lib/python2.4/site-packages/cobbler/remote.py", line 840, in
modify_item
    self._validate_ks_template_path(arg)
   File "/usr/lib/python2.4/site-packages/cobbler/remote.py", line 824, in
_validate_ks_template_path
    utils.die(self.logger, "Invalid kickstart template file location %s, it
is not inside /var/lib/cobbler/kickstarts/" % path)
   File "/usr/lib/python2.4/site-packages/cobbler/utils.py", line 137, in
die
    raise CX(msg)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20160421/1787d52d/attachment.htm>