VMware: Disable suds caching

The default cache implementation in suds store pickled objects in a
predictable path in /tmp which could lead to attacks. This patch
turns off suds caching to address this security issue.

Change-Id: I7daaa25a0677004e03896298e9c3026d5c33c6ac
Closes-Bug: #1341954
(cherry picked from commit 6a41fe9c5c)
This commit is contained in:
Vipin Balachandran 2014-08-22 10:19:29 +05:30
parent 36406c9bb0
commit 03573a02a3
2 changed files with 4 additions and 2 deletions

View File

@ -58,7 +58,8 @@ class PBMClient(vim_module.Vim):
self._vimSession = vimSession
self._url = vim_util.get_soap_url(protocol, host, 'pbm')
# create the pbm client
self._client = suds.client.Client(pbm_wsdl, location=self._url)
self._client = suds.client.Client(pbm_wsdl, location=self._url,
cache=suds.cache.NoCache())
PBMClient._copy_client_cookie(self._vimSession, self._client)
# Get the PBM service content
si_moref = vim_module.get_moref(SERVICE_INSTANCE, SERVICE_TYPE)

View File

@ -85,7 +85,8 @@ class Vim(object):
wsdl_loc = Vim._get_wsdl_loc(protocol, host)
soap_url = vim_util.get_soap_url(protocol, host)
self._client = suds.client.Client(wsdl_loc, location=soap_url,
plugins=[VIMMessagePlugin()])
plugins=[VIMMessagePlugin()],
cache=suds.cache.NoCache())
self._service_content = self.RetrieveServiceContent('ServiceInstance')
@staticmethod