OpenStack Security Advisory

  1. Bug #1435386
  2. Comment #10

Comment 10 for bug 1435386

Revision history for this message
Thierry Carrez (ttx) wrote : Re: VMs are being taken over through a VNC proxy exploit

That said, documentation recommends setting up 0.0.0.0 so that "live migration can work":

http://docs.openstack.org/admin-guide-cloud/content/section_configuring-compute-migrations.html
"You must specify vncserver_listen=0.0.0.0 or live migration will not work correctly."

http://docs.openstack.org/admin-guide-cloud/content/nova-vncproxy-replaced-with-nova-novncproxy.html
"To connect the service to your Compute deployment, add the following configuration options to your nova.conf file:
    vncserver_listen=0.0.0.0"
"To use live migration, use the 0.0.0.0 address."