Return-Path: X-Original-To: apmail-cloudstack-dev-archive@www.apache.org Delivered-To: apmail-cloudstack-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CD5DD1004C for ; Mon, 23 Sep 2013 17:20:00 +0000 (UTC) Received: (qmail 31059 invoked by uid 500); 23 Sep 2013 17:19:58 -0000 Delivered-To: apmail-cloudstack-dev-archive@cloudstack.apache.org Received: (qmail 31003 invoked by uid 500); 23 Sep 2013 17:19:58 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 30995 invoked by uid 99); 23 Sep 2013 17:19:57 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Sep 2013 17:19:57 +0000 X-ASF-Spam-Status: No, hits=-0.4 required=5.0 tests=PLING_QUERY,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of darren.s.shepherd@gmail.com designates 209.85.212.171 as permitted sender) Received: from [209.85.212.171] (HELO mail-wi0-f171.google.com) (209.85.212.171) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Sep 2013 17:19:50 +0000 Received: by mail-wi0-f171.google.com with SMTP id hm2so2524007wib.10 for ; Mon, 23 Sep 2013 10:19:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=J7bQjFj3uxd+jta6unRZZNEejrIejFb46y/BOXYloqY=; b=DtsRrHrgVEFenMywcIwKVGSFIgved85hqtX0+QjY66D/EB2Ua+2pO+tC6GCcpxAYGU zX0lfnxD0AGwqAOoqJrMsebp4oU57let2iGH8KCdFZyW8VimLW1wYlXiViCRTtO3yVbc YUxICNHzxTuk7WMSUsgtOn6GKM6EQB7jwgMWaGHsF6wkSdpPYmCO/F8I60U2V4Q//OZv NdfuFBqb0NPppwHaBJySGzRLdociiUqHuOshqg+EGw3wd9i05oBPskAmiTtH15zTo9yW mKaEw/UYfDa5mh0kWtxPeCRs3Jbf3+huDfow7LsA2F2mBtN+9ws/gTEkjHrieCeMQuEi q6bQ== MIME-Version: 1.0 X-Received: by 10.180.185.77 with SMTP id fa13mr14172399wic.58.1379956770472; Mon, 23 Sep 2013 10:19:30 -0700 (PDT) Received: by 10.216.152.9 with HTTP; Mon, 23 Sep 2013 10:19:30 -0700 (PDT) Date: Mon, 23 Sep 2013 10:19:30 -0700 Message-ID: Subject: whoa! our official upgrade procedures require 8096? From: Darren Shepherd To: "dev@cloudstack.apache.org" Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org I complained once before that I didn't like the existence of 8096 but then plenty responded that its an optional thing. I just noticed in another thread that cloud-sysvmadm requires 8096. This is exactly why 8096 should not exist. If we create an unauthenticated backdoor, its just too tempting to use it. So now as part of our official upgrade procedures we tell people to turn on 8096 on a production cloud to reboot the system VMs. I don't think that's acceptable. Darren