canonical-ci-engineering team mailing list archive

[Francis Ginther <francis.ginther@xxxxxxxxxxxxx>]

On Thu, Oct 31, 2013 at 5:15 PM, Evan Dandrea
<evan.dandrea@xxxxxxxxxxxxx> wrote:
> Out of my own curiosity, how confident of the security model are we in
> the current arrangement of using a Canonistack Upstream Merger for
> these?

We're relying on the jenkins juju charms to provide the security
between nodes and the outside world. There is no protection between
the nodes internally or restrictions on outbound connections. So a
malicious MP could take down the service or access external websites
uninhibited. There is no built-in connections to other internal
Canonical networks.

Francis
-- 
Francis Ginther
Canonical - Ubuntu Engineering - Continuous Integration Team