Add ISOLATEADMINS, default to true. This variable splits Emulab admins
and non-admins in projects that have users in both categories (mostly emulab-ops, tbres and testbed). The new order says that if the swapper of an active experiment is an admin, only other admins have their accounts (and homedirs) propagated to the experiment. Analogous for non-admin experiments. Add DYNAMICROOTPASSWORDS, default to true, which causes the root passwords on emulab images to be changed each time they are allocated to an experiment. This is to prevent the same password on every node for years at a time!
Showing with 9 additions and 1 deletion