Cinder

Sample cinder.conf file leaks build system IP

Bug #1755282 reported by Jay Bryant
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
Fix Released
Medium
Jay Bryant
Cinder rocky-1

Bug Description

It was brought up on the mailing list that it is possible to leak the IP of the address of the build system into the cinder.conf file. We should not do this.

This can be resolved by using the 'sample_default' option.

Jay Bryant (jsbryant)
Changed in cinder:
importance: Undecided → Medium
assignee: nobody → Jay Bryant (jsbryant)
milestone: none → queens-1
milestone: queens-1 → rocky-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cinder (master)

Fix proposed to branch: master
Review: https://review.openstack.org/552134

Changed in cinder:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cinder (master)

Reviewed: https://review.openstack.org/552134
Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=1197d7f6f0de8bb10daa740dda40dc31b0465bb1
Submitter: Zuul
Branch: master

commit 1197d7f6f0de8bb10daa740dda40dc31b0465bb1
Author: Jay S. Bryant <email address hidden>
Date: Mon Mar 12 15:25:17 2018 -0500

    Avoid build system IP going into sample config

    We should not show the IP address of the build system as
    the sample default for my_ip in /etc/cinder/cinder.conf.sample .

    This patch sets a sample_default that will be used instead.

    Change-Id: If9ba07bb7f83c2ad3d89e2d5264c064117bbad23
    closes-bug: 1755282

Changed in cinder:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/cinder 13.0.0.0b1

This issue was fixed in the openstack/cinder 13.0.0.0b1 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.