[openstack-dev] Service password storage
Levin
irrenhaus3 at gmail.com
Mon Jan 11 10:37:09 UTC 2016
Dear openstack developers,
I installed openstack via devstack recently, and I found out that the
admin passwords for services like cinder and nova are stored in plain
text in their /etc/*/*.conf files. These files are rw--r--r-- by
default, which I believe to be a pretty serious security risk. Is this
intended, and/or configurable pre-install?
Greetings,
ih3
More information about the OpenStack-dev
mailing list