Comment 31 for bug 1290537

Revision history for this message
John Garbutt (johngarbutt) wrote : Re: RBAC policy not enforced when adding a security group rule using EC2 API (CVE-2014-0167)

+2 on that patch, but looks like we are sorted anyways