Open Stack

Hi Cinder folks,

Malini from the security group has drafted an OpenStack Security Note for an issue regarding cinder driver permissions that was previously reported to the VMT.

Our process for publishing OSSNs requires sign off from two OSSN core and one core of the affected project(s) - we’d like someone from Cinder core could give it a quick sanity check before we publish it more widely.

https://review.openstack.org/#/c/92434/

Cheers
-Rob