nova-security-improvements team mailing list archive

Thread
Date

Essex security improvement: Root wrapper

To: nova-security-improvements@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry@xxxxxxxxxxxxx>
Date: Thu, 27 Oct 2011 15:50:26 +0200
Organization: OpenStack
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1

Hello everyone,

Our subteam has one blueprint assigned:
https://blueprints.launchpad.net/nova/+spec/nova-security-updates

This is supposed to be replaced with more accurate blueprints detailing
the stuff that will actually be worked on.

Personally, I plan to spend time on replacing the sudoers-based root
wrapper by something more fine-grained:

https://blueprints.launchpad.net/nova/+spec/nova-rootwrap

I hope to complete it by essex-2 (or rather, to have time to work on it
during essex-2 timeframe).

Anything else that is ready to be implemented for Essex (and that we
should have blueprints for) ? Or the rest of the improvements will stay
in "brainstorming" mode until F ?

Regards,

-- 
Thierry Carrez (ttx)
Release Manager, OpenStack