openstack
/
nova
Code Issues Proposed changes
nova/nova
History
Aaron Rosen af2f823107 Prevent spoofing instance_id from neutron to nova 
Previously, one could update a port's device_id in neutron to be
that of another tenant's instance_id and then be able to retrieve
that instance's metadata. This patch prevents this from occurring by
checking that X-Tenant-ID received from the metadata request matches
the tenant_id in the nova database.

DocImpact - This patch is dependent on another patch in neutron
            which adds X-Tenant-ID to the request. Therefore to
            minimize downtime one should upgrade Neutron first (then
            restart neutron-metadata-agent) and lastly update nova.

Change-Id: I93bf662797c3986324ca2099b403833c2e990fb4
Closes-Bug: #1235450
 		2013-12-11 12:38:47 -08:00
..
CA
…
api Prevent spoofing instance_id from neutron to nova 2013-12-11 12:38:47 -08:00
cells Correct use of ConfigFilesNotFoundError 2013-10-10 10:25:01 -04:00
cert Port all rpcapi modules to oslo.messaging interface 2013-09-03 21:22:43 +01:00
cloudpipe Remove exceptions.Duplicate 2013-09-24 15:41:28 +10:00
cmd Fix all scripts to honor the enabled_ssl_apis flag 2013-10-30 22:22:07 +00:00
compute Merge "Prevent rescheduling on block device failure" into stable/havana 2013-12-10 01:04:53 +00:00
conductor Fix conductor's object change detection 2013-10-10 15:49:18 -07:00
console Fix console db can't load attribute pool 2013-09-25 16:35:00 +08:00
consoleauth Port all rpcapi modules to oslo.messaging interface 2013-09-03 21:22:43 +01:00
db Merge "Moved quota headroom calculations into quota_reserve" into stable/havana 2013-12-05 12:12:15 +00:00
hacking Remove "N309 Python 3.x incompatible construct" 2013-08-14 11:29:55 +02:00
image Don't wrap Glance exceptions in NovaExceptions 2013-09-26 02:59:23 +00:00
ipv6 Fix and Gate on H303 (no wildcard imports) 2013-07-30 14:34:31 -07:00
keymgr Wire in ConfKeyManager._generate_hex_key! 2013-09-13 07:08:51 -04:00
locale Imported Translations from Transifex 2013-10-02 06:06:26 +00:00
network Address infinite loop in nova compute when getting network info 2013-11-26 17:36:23 +08:00
objects Pull system_metadata for notifications on instance.save() 2013-10-31 19:29:11 -07:00
objectstore Fix and gate on E125 2013-07-04 08:49:45 +02:00
openstack Merge "Sync rpc fix from oslo-incubator" into stable/havana 2013-12-07 10:22:52 +00:00
pci Check for None when cleaning PCI dev usage 2013-10-30 11:04:24 -04:00
scheduler Remove _get_compute_info from filter_scheduler.py 2013-09-25 15:02:56 +08:00
servicegroup Make compute_api use Service and ComputeNode objects 2013-08-29 00:18:46 -07:00
spice
…
storage Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
tests Prevent spoofing instance_id from neutron to nova 2013-12-11 12:38:47 -08:00
virt Merge "VMware: Fix unhandled session failure issues" into stable/havana 2013-12-07 23:25:50 +00:00
vnc Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
volume Pass volume_api to get_encryption_metadata 2013-10-30 13:55:07 +01:00
__init__.py
…
availability_zones.py Merge "Fix unicode key of azcache can't be stored to memcache" 2013-09-02 11:31:22 +00:00
baserpc.py Port all rpcapi modules to oslo.messaging interface 2013-09-03 21:22:43 +01:00
block_device.py Enable libvirt driver to use the new BDM format 2013-09-05 10:02:00 +02:00
config.py
…
context.py Pop extra keys from context in from_dict() 2013-08-22 08:30:12 +01:00
crypto.py Improve "keypair data is invalid" error message 2013-09-16 13:15:12 -07:00
exception.py Make Exception.format_message aware of Messages 2013-10-01 13:58:29 +00:00
filters.py Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
hooks.py Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
loadables.py
…
manager.py Port to oslo.messaging.Notifier API 2013-09-05 06:26:01 +01:00
netconf.py Better default for my_ip if 8.8.8.8 is unreachable 2013-06-26 15:10:39 -04:00
notifications.py Correct deleted_at value in notification messages 2013-09-20 13:30:24 +00:00
notifier.py Port to oslo.messaging.Notifier API 2013-09-05 06:26:01 +01:00
paths.py
…
policy.py Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
quota.py Moved quota headroom calculations into quota_reserve 2013-11-13 13:32:37 +01:00
rpcclient.py Port all rpcapi modules to oslo.messaging interface 2013-09-03 21:22:43 +01:00
safe_utils.py
…
service.py Fix setting backdoor port in service start 2013-10-30 14:54:49 -04:00
test.py Add support for API message localization 2013-09-03 03:12:10 +00:00
utils.py Remove `utils.parse_mailmap` 2013-10-01 16:18:44 +00:00
version.py Remove locals() from various places. 2013-07-17 09:30:48 +04:00
weights.py
…
wsgi.py maint: remove redundant default=None for config options 2013-08-09 02:05:04 +01:00