openstack
/
glance
Code Issues Proposed changes
glance/glance/async
History
Brian Rosmaita 58311904a7 Adding constraints around qemu-img calls 
* All "qemu-img info" calls are now run under resource limitations that
  limit CPU time to 2 seconds and address space usage to 1 GB. This
  helps avoid any DoS attacks via malicious images.
* All "qemu-img convert" calls now specify the import format so that it
  does not have to be inferred by qemu-img.

SecurityImpact

(Hemanth did all the work on this, I'm just doing the backport.)

Co-authored-by: Hemanth Makkapati <hemanth.makkapati@rackspace.com>
Closes-Bug: #1449062
(cherry picked from commit 69a9b659fd)

Change-Id: I65f30b85439a8811545b0ca590555528631954df
 		2016-09-27 16:11:17 -04:00
..
flows Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00
__init__.py Move to graduated oslo.log module 2015-03-12 11:48:24 +00:00
taskflow_executor.py Move to using futurist library for taskflow executors 2015-07-28 00:45:00 +00:00
utils.py Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00