Comment 5 for bug 2071740

Revision history for this message
Jay Faulkner (jason-oldos) wrote : Re: Hardening: don't run qemu-img with unvalidated image data

As a note: for the integrated Ironic case, we only use public glance images -- we believe this normally requires admin privs to mark an image as public? This should limit the blast radius for the integrated ironic case.