nova/nova/api
Aaron Rosen af2f823107 Prevent spoofing instance_id from neutron to nova
Previously, one could update a port's device_id in neutron to be
that of another tenant's instance_id and then be able to retrieve
that instance's metadata. This patch prevents this from occurring by
checking that X-Tenant-ID received from the metadata request matches
the tenant_id in the nova database.

DocImpact - This patch is dependent on another patch in neutron
            which adds X-Tenant-ID to the request. Therefore to
            minimize downtime one should upgrade Neutron first (then
            restart neutron-metadata-agent) and lastly update nova.

Change-Id: I93bf662797c3986324ca2099b403833c2e990fb4
Closes-Bug: #1235450
2013-12-11 12:38:47 -08:00
..
ec2 disassociate_address response should match ec2 2013-09-11 23:37:10 -04:00
metadata Prevent spoofing instance_id from neutron to nova 2013-12-11 12:38:47 -08:00
openstack Merge "Fixes Invalid tag name error when using k:v tagname" into stable/havana 2013-11-18 07:09:04 +00:00
__init__.py Removed newly added userdatarequesthandler for OS API, there is no need to add this handler since the existing Ec2 API metadatarequesthandler does the same job 2011-08-15 15:09:42 -07:00
auth.py Merge "Disable per-user rate limiting by default" 2013-07-31 12:04:52 +00:00
manager.py Move network_driver into new nova.network.driver 2012-12-16 22:24:07 +00:00
sizelimit.py Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00
validator.py Remove the monkey patching of _ into the builtins 2013-07-26 07:31:17 -07:00