juju-core

relation-get allows access to inappropriate settings

Bug #1223339 reported by William Reade
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Canonical Juju
Expired
Medium
Unassigned
juju-core
Won't Fix
Medium
Unassigned

Bug Description

In a relation between mysql/0 and wordpress/0-3, each wordpress unit can see its siblings' relation settings in addition to the mysql unit's relation settings. This channel is unsafe and inappropriate, because there's no way of reacting to changes in those settings, and must be closed.

Curtis Hovey (sinzui)
tags: added: hours
removed: bitesize
Curtis Hovey (sinzui)
tags: added: security
Canonical Juju QA Bot (juju-qa-bot)
Changed in juju-core:
importance: High → Medium
Revision history for this message
Anastasia (anastasia-macmood) wrote :

Re-targeting to Juju 2.x

Changed in juju-core:
status: Triaged → Won't Fix
Changed in juju:
status: New → Triaged
importance: Undecided → Medium
milestone: none → 2.1.0
Curtis Hovey (sinzui)
Changed in juju:
milestone: 2.1-rc2 → none
Revision history for this message
Canonical Juju QA Bot (juju-qa-bot) wrote :

This bug has not been updated in 5 years, so we're marking it Expired. If you believe this is incorrect, please update the status.

Changed in juju:
status: Triaged → Expired
tags: added: expirebugs-bot
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.