glance/releasenotes/notes/add-processlimits-to-qemu-img-c215f5d90f741d8a.yaml
Brian Rosmaita e6b34fc7df Correct releasenote for Ib900bbc05cb9ccd90c6f56ccb4bf2006e30cdc80
The releasenote for change Ib900bbc05cb9ccd90c6f56ccb4bf2006e30cdc80
says that tasks were made admin-only in Liberty.  They were actually
made admin-only in Mitaka.  This patch s/Liberty/Mitaka/.

Change-Id: I38bb312e5a92434aa50f9dbb9673ec3628d8001b
2016-09-27 15:59:02 -04:00

13 lines
511 B
YAML

---
security:
- All ``qemu-img info`` calls are now run under resource
limitations that limit the CPU time and address space
usage of the process running the command to 2 seconds
and 1 GB respectively. This addresses the bug
https://bugs.launchpad.net/glance/+bug/1449062
Current usage of "qemu-img" is limited to Glance tasks,
which by default (since the Mitaka release) are only
available to admin users. We continue to recommend that
tasks only be exposed to trusted users