From b27d12e48de81e0f869356d8f188c0b42d12a1b3 Mon Sep 17 00:00:00 2001
From: Jaime Melis <jmelis@opennebula.org>
Date: Tue, 26 May 2015 12:02:43 +0200
Subject: [PATCH] Feature #3021: disallow root to run onehost sync

---
 src/cli/one_helper/onehost_helper.rb | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/cli/one_helper/onehost_helper.rb b/src/cli/one_helper/onehost_helper.rb
index a9ed75ea51..44f262daa4 100644
--- a/src/cli/one_helper/onehost_helper.rb
+++ b/src/cli/one_helper/onehost_helper.rb
@@ -167,6 +167,11 @@ class OneHostHelper < OpenNebulaHelper::OneHelper
 
     NUM_THREADS = 15
     def sync(host_ids, options)
+        if `id -u`.to_i == 0 || `id -G`.split.collect{|e| e.to_i}.include?(0)
+            STDERR.puts("Cannot run 'onehost sync' as root")
+            exit -1
+        end
+
         begin
             current_version = File.read(REMOTES_LOCATION+'/VERSION').strip
         rescue