[Openstack-security] [Openstack] API Security

Jeremy Stanley fungi at yuggoth.org
Tue Apr 29 18:44:02 UTC 2014


On 2014-04-29 12:28:48 -0400 (-0400), Nathanael Burton wrote:
> This isn't logging on the service side, this is logging on the
> client because the user ran --debug. This isn't a big security
> issue other than a documentation or user educational one.

Agreed. See, for example, the big red (pink?) box at...

http://docs.openstack.org/developer/horizon/topics/deployment.html#logging

...and also the related bug report...

https://launchpad.net/bugs/1004114

-- 
Jeremy Stanley




More information about the Openstack-security mailing list