nova does not validate security groups

Bug #1134960 reported by Sean Dague
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Fix Released
Medium
Sean Dague

Bug Description

The security_groups parameter on server create is not validated against existing security_groups, which could lead to data corruption with bogus data being created.

This test should be added to: _validate_and_provision_server in https://github.com/openstack/nova/blob/master/nova/compute/api.py#L463

There is a tempest test for this which was previously skipped.

Sean Dague (sdague)
Changed in nova:
status: New → Triaged
importance: Undecided → Medium
assignee: nobody → Sean Dague (sdague-b)
Sean Dague (sdague)
Changed in nova:
status: Triaged → Fix Committed
milestone: none → grizzly-rc1
Thierry Carrez (ttx)
Changed in nova:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in nova:
milestone: grizzly-rc1 → 2013.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.