cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daan Hoogland <daan.hoogl...@gmail.com>
Subject Re: [DISCUSS] Freezing master for 4.11
Date Mon, 15 Jan 2018 11:49:04 GMT
​Kristian,

​

On Mon, Jan 15, 2018 at 11:49 AM, Kristian Liivak <kris@wavecom.ee> wrote:
>>
> ​...
​


​As for this one:​

> Also there is major security hole. When instance is destroyd and expunged
>> > and new instance is created with old IP all old data is unaffected in VR
>> > New instance will get then old root password and  ssh key if they were
>> > present in VR
>>
> ​I don't see how this is a security issue​. The user won't get in and
update the key and password to get in. No harm done or am I overlooking
something?


-- 
Daan

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message