heat/releasenotes/notes/system-random-string-38a14ae2cb6f4a24.yaml
Pavlo Shchelokovskyy 41605aaac1 Replace random with SystemRandom for RandomString
it might be theoretically possible to infer the state of
standard Python's RNG in a long-running heat-engine service
from multiple created RandomString resources.

Let's use the random.SystemRandom (and os.urandom) for
OS::Heat::RandomString instead.

Change-Id: Iac5c03176fc8bae95ada883621196bd9cb453be3
Closes-Bug: #1745931
2018-01-31 15:57:20 +02:00

7 lines
177 B
YAML

---
security:
- |
Heat no longer uses standard Python RNG when generating values for
OS::Heat::RandomString resource, and instead relies on system's RNG
for that.