Flavio Percoco d529863a1e Don't import files with backed files ... There's a security issue where it'd be possible to import images with backed files using the task engine and then use/convert those to access system files or any other file in the system. An example of an attack would be to import an image with a backing file pointing to `/etc/passwd`, then convert it to raw and download the generated image. This patch forbids importing files with baking files entirely. It does that in the `_ImportToFS` task, which is the one that imports the image locally to then execute other tasks on it. It's not necessary for the `_ImportToStore` task because other tasks won't be executed when the image is imported in the final store. Change-Id: I35f43c3b3f326942fb53b7dadb94700ac4513494 Closes-bug: #1471912		2015-08-13 20:46:58 +02:00
..
flows	Don't import files with backed files	2015-08-13 20:46:58 +02:00
__init__.py	Introduces eventlet executor for Glance Tasks	2014-09-02 11:45:58 -04:00
test_async.py	Introduces eventlet executor for Glance Tasks	2014-09-02 11:45:58 -04:00
test_taskflow_executor.py	Remove usage of assert_called_once in mocks	2015-07-11 22:54:25 +03:00