Comment 2 for bug 1836389

Revision history for this message
sean mooney (sean-k-mooney) wrote :

the current logic is incorrectly and expoing the host pci adress in the metadata not the vitual guest adress
while one might think this is a security issue it is not as the host adress is already exposed to the end user via the neutron port profile. as such this does not represent a new information disclosure however it defeats the purpose of the deivce role tagging feature as it is intended to allow user to easily map between the virtual devices and the tag they assigned to the logical neutron port.

i am traigeing this as medium as it is a valid issue an is already in progress.