OpenStack Compute (nova)

  1. Bug #1227027
  2. Comment #9

Comment 9 for bug 1227027

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Insecure directory permissions with snapshot code

Looks like a tricky backport again: both solutions (specific group and new rootwrap commands) rely on distros handling more than just a code update... a painful upgrade, and the impact of this vulnerability might make it a bad trade-off.

Unless nova can reuse existing rootwrap filters to achieve this, so that we don't actually need to update the rootwrap filters config files !