[ops][glance][security] looking for metadefs users

Jeremy Stanley fungi at yuggoth.org
Thu Mar 11 20:54:17 UTC 2021


On 2021-03-11 14:22:21 -0600 (-0600), Ghanshyam Mann wrote:
[...]
> In a quick search, interop certification guidelines 1] also does
> not use these API capabilities so changing to admin should be fine
> from interop and so does from Tempest test modification point of
> view.
[...]

Yep, if you check out the original bug reports leading up to the
OSSN, we did at least confirm these were not part of any trademark
program requirement before recommending that access be blocked. That
was one of our deciding factors in the disclosure timeline.
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210311/6078fc0f/attachment.sig>


More information about the openstack-discuss mailing list