openstack
/
deb-cinder
Code Issues Proposed changes
deb-cinder/cinder
History
Sean McGinnis 78f17f0ad7 Limit memory & CPU when running qemu-img info 
It was found that a modified or corrupted image file can cause a DoS
on the host when getting image info with qemu-img.

This uses the newer 'prlimit' parameter for oslo.concurrency execute
to set an address space limit of 1GB and CPU time limit of 2 seconds
when running the qemu-img info command.

Change-Id: If5b7129b266ef065642bc7898ce9dcf93722a053
Closes-bug: #1449062
 		2016-09-22 15:31:37 -05:00
..
api Add snapshot id validation during volume creation 2016-09-22 15:05:10 +03:00
backup Merge "Fix invalid services caused by enabled_backends" 2016-09-08 17:05:11 +00:00
brick Remove race condition from lvextend 2016-08-01 20:26:14 +00:00
cmd Merge "Fix invalid services caused by enabled_backends" 2016-09-08 17:05:11 +00:00
common Register state_path opts and add it to sample conf 2016-09-07 11:53:12 +02:00
compute Fix the interface to call update_server_volume 2016-08-18 11:45:47 +08:00
config Replace key manager with Castellan 2016-08-29 10:19:10 +08:00
consistencygroup Removed RPC topic config options 2016-08-29 11:16:53 +05:30
db Reserve 5 migrations for Newton backports 2016-09-19 13:47:16 -04:00
group Save volume_type/group_type uuid into db when creating group 2016-09-12 06:37:17 -04:00
hacking Revert "Add hacking check to prevent assert_called_once" 2016-05-24 12:36:22 -04:00
image Limit memory & CPU when running qemu-img info 2016-09-22 15:31:37 -05:00
interface Driver documentation cleanup 2016-08-25 15:51:37 +05:30
keymgr Replace key manager with Castellan 2016-08-29 10:19:10 +08:00
locale Imported Translations from Zanata 2016-09-22 07:12:09 +00:00
message Add pagination support to messages 2016-05-27 10:49:00 +00:00
objects Merge "Have a default OPTIONAL_FIELDS for persistent OVOs" 2016-09-21 17:40:40 +00:00
replication Remove unused logging import and LOG global var 2016-05-20 17:17:38 +08:00
scheduler Merge "Fix creating typeless volumes with Mitaka's c-sch" 2016-09-20 17:42:01 +00:00
tests Limit memory & CPU when running qemu-img info 2016-09-22 15:31:37 -05:00
transfer check quota per_volume_gigabytes for transfer-accept 2016-09-02 03:13:25 +00:00
volume Merge "Dell SC: Error attaching after LV-AFO" 2016-09-22 19:52:10 +00:00
wsgi Remove unused logging import and LOG global var 2016-05-20 17:17:38 +08:00
zonemanager Add supported driver checks to Zone Manager 2016-09-01 15:45:42 -07:00
__init__.py Re-enabled hacking checks for H105 2016-01-05 11:22:40 +02:00
context.py Use to_policy_values for enforcing policy 2016-09-13 01:13:15 +00:00
coordination.py update coordination.Lock.release's docstring 2016-06-19 01:55:35 -04:00
exception.py Add supported driver checks to Zone Manager 2016-09-01 15:45:42 -07:00
flow_utils.py Refactoring of manager's create_volume flow 2015-07-24 11:19:09 +02:00
i18n.py Remove unused gettextutils from oslo-incubator 2015-10-16 15:22:49 -05:00
manager.py Add cluster job distribution 2016-07-22 21:00:11 +02:00
opts.py Register state_path opts and add it to sample conf 2016-09-07 11:53:12 +02:00
policy.py Use to_policy_values for enforcing policy 2016-09-13 01:13:15 +00:00
quota.py Add generic volume groups 2016-07-16 19:34:39 -04:00
quota_utils.py Handle API NotFound exceptions at WSGI level 2016-07-22 21:06:13 +02:00
rpc.py Add volume RPC API v3.0 2016-09-15 15:02:01 +02:00
service.py Merge "Added config option to enable SSL" 2016-09-15 02:01:23 +00:00
ssh_utils.py Fix sshpool.remove code 2016-03-01 03:20:04 +00:00
test.py Merge "Stop using mox in unit/*.py tests (1/2)" 2016-08-30 10:51:16 +00:00
utils.py Do not pass unicode to str.isspace() when disabling a service 2016-09-02 11:05:33 +00:00
version.py
…