[Openstack-security] [openstack/cinder] SecurityImpact review request change If492810a2f10fa5954f8c8bb708b14be0b77fb90

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Tue Dec 9 11:43:12 UTC 2014


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/140304

Log:
commit 57ea636e0fcef64436ceacce36c7aedb3bd23819
Author: Stuart McLaren <stuart.mclaren at hp.com>
Date:   Fri Sep 5 12:48:04 2014 +0000

    Add client_socket_timeout option
    
    Add a parameter to take advantage of the new(ish) eventlet socket timeout
    behaviour.  Allows closing idle client connections after a period of
    time, eg:
    
    $ time nc localhost 8776
    real    1m0.063s
    
    Setting 'client_socket_timeout = 0' means do not timeout.
    
    DocImpact:
    Added client_socket_timeout option (default=900).
    
    SecurityImpact
    
    Conflicts:
            cinder/wsgi.py
            etc/cinder/cinder.conf.sample
    
    Change-Id: If492810a2f10fa5954f8c8bb708b14be0b77fb90
    Closes-bug: #1361360
    Closes-bug: #1371022
    (cherry picked from commit 08bfa77aeccb8ca589e3fb5cf9771879818f59de)





More information about the Openstack-security mailing list