glance/glance/tests
Brian Rosmaita 58311904a7 Adding constraints around qemu-img calls
* All "qemu-img info" calls are now run under resource limitations that
  limit CPU time to 2 seconds and address space usage to 1 GB. This
  helps avoid any DoS attacks via malicious images.
* All "qemu-img convert" calls now specify the import format so that it
  does not have to be inferred by qemu-img.

SecurityImpact

(Hemanth did all the work on this, I'm just doing the backport.)

Co-authored-by: Hemanth Makkapati <hemanth.makkapati@rackspace.com>
Closes-Bug: #1449062
(cherry picked from commit 69a9b659fd)

Change-Id: I65f30b85439a8811545b0ca590555528631954df
2016-09-27 16:11:17 -04:00
..
etc Make properties roles check case-insensitive 2015-06-03 08:30:21 +00:00
functional Prevent user to remove last location of the image 2016-02-03 10:01:00 -05:00
integration Prevent image status being directly modified via v1 2015-09-22 16:07:02 +02:00
unit Adding constraints around qemu-img calls 2016-09-27 16:11:17 -04:00
var Rewrite SSL tests 2015-02-02 20:10:27 -08:00
__init__.py Fix getaddrinfo if dnspython is installed 2014-12-05 09:29:16 +00:00
stubs.py Don't use slashes for long lines - use parentheses instead 2015-08-16 07:21:13 +00:00
test_hacking.py Leverage dict comprehension in PEP-0274 2015-05-28 01:46:02 +00:00
utils.py Merge "Fix Server.start() on Python 3.4" 2015-06-20 18:49:56 +00:00