[Openstack-security] [Bug 1244025] Re: Remote security group criteria don't work in Midonet plugin
Thierry Carrez
thierry.carrez+lp at gmail.com
Fri Mar 21 16:25:08 UTC 2014
Yes, let's decouple the two issues. We need the security patch for the
current havana (stable/havana) and icehouse (master) branches in order
to plug this long-standing security issue. Those should be proposed as
bugfixes without introducing a new feature, configuration option or
significant behavior change in order to be acceptable as a stable branch
update.
Please post the references of the reviews here when those will have been
submitted to Gerrit.
--
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1244025
Title:
Remote security group criteria don't work in Midonet plugin
Status in OpenStack Neutron (virtual network service):
In Progress
Status in neutron havana series:
New
Status in OpenStack Security Advisories:
Confirmed
Bug description:
When creating a security rule that specifies a remote security group
(rather than a CIDR range), the Midonet plugin does not enforce this
criterion. With an egress rule, for example, one of the criteria for a
particular rule may be that only traffic to security group A will be
allowed out. This criterion is ignored, and traffic will be allowed
out regardless of the destination security group, provided that it
conforms to the rule's other criteria.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1244025/+subscriptions
More information about the Openstack-security
mailing list