bind all services not required by the nodes to the loopback interface or add ingress firewall rules for these services
Bug #975450 reported by
Jamie Strandboge
This bug affects 2 people
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| MAAS |
Fix Released
|
Critical
|
Jeroen T. Vermeulen | ||
| txlongpoll |
Fix Released
|
Critical
|
Julian Edwards | ||
| maas (Ubuntu) |
Triaged
|
High
|
Andres Rodriguez | ||
| Precise |
Won't Fix
|
High
|
kavya | ||
| txlongpoll (Ubuntu) |
Won't Fix
|
Undecided
|
Andres Rodriguez | ||
| Precise |
Won't Fix
|
Undecided
|
Unassigned | ||
Bug Description
This is a tracking bug for a dependency of the maas MIR (bug #961344).
For 12.04, bind all services not required by the nodes to the loopback interface (like with postgresql). This includes mass-pserv, maas-txlongpoll, epmd, and rabbitmq and anything else that is added between now and release. If this cannot be done, add explict firewall rules (I suggest in a 'maas' chain to make this play nice with other rulesets) for these open ports.
Related branches
lp:~jtv/maas/bug-977752
- Gavin Panella (community): Approve
-
Diff: 153 lines (+64/-38)3 files modifiedetc/pserv.yaml (+6/-0)
src/provisioningserver/plugin.py (+57/-38)
src/provisioningserver/tests/test_plugin.py (+1/-0)
| tags: | added: rls-p-tracking |
| Changed in maas (Ubuntu Precise): | |
| milestone: | none → ubuntu-12.04 |
| status: | New → Triaged |
| security vulnerability: | no → yes |
| security vulnerability: | yes → no |
| Changed in maas: | |
| status: | New → Triaged |
| importance: | Undecided → Critical |
Revision history for this message
| Jeroen T. Vermeulen (jtv) wrote | #1 |
Revision history for this message
| Jeroen T. Vermeulen (jtv) wrote | #2 |
Revision history for this message
| Jeroen T. Vermeulen (jtv) wrote | #3 |
| Changed in maas: | |
| assignee: | nobody → Jeroen T. Vermeulen (jtv) |
| status: | Triaged → Fix Released |
| Changed in maas (Ubuntu Precise): | |
| importance: | Undecided → High |
| Changed in txlongpoll: | |
| status: | New → In Progress |
| importance: | Undecided → Critical |
| assignee: | nobody → Julian Edwards (julian-edwards) |
Revision history for this message
| Julian Edwards (julian-edwards) wrote | #4 |
| Changed in txlongpoll: | |
| milestone: | none → 0.3.2 |
| status: | In Progress → Fix Released |
| Changed in txlongpoll (Ubuntu Precise): | |
| status: | New → Confirmed |
| Changed in maas (Ubuntu): | |
| assignee: | nobody → Andres Rodriguez (andreserl) |
| Changed in txlongpoll (Ubuntu): | |
| assignee: | nobody → Andres Rodriguez (andreserl) |
| Changed in maas (Ubuntu Precise): | |
| assignee: | nobody → kavya (kavyamensin123) |
| Changed in txlongpoll (Ubuntu): | |
| status: | Confirmed → Won't Fix |
Revision history for this message
| Steve Langasek (vorlon) wrote | #5 |
| Changed in maas (Ubuntu Precise): | |
| status: | Triaged → Won't Fix |
| Changed in txlongpoll (Ubuntu Precise): | |
| status: | Confirmed → Won't Fix |
To post a comment you must log in.
Split off the pserv & txlongpoll parts as bug 977752 (we can do these within the MAAS code).