On Thu, Oct 31, 2013 at 5:15 PM, Evan Dandrea
<[email protected]> wrote:
> Out of my own curiosity, how confident of the security model are we in
> the current arrangement of using a Canonistack Upstream Merger for
> these?

We're relying on the jenkins juju charms to provide the security
between nodes and the outside world. There is no protection between
the nodes internally or restrictions on outbound connections. So a
malicious MP could take down the service or access external websites
uninhibited. There is no built-in connections to other internal
Canonical networks.

Francis
-- 
Francis Ginther
Canonical - Ubuntu Engineering - Continuous Integration Team

-- 
Mailing list: https://launchpad.net/~canonical-ci-engineering
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~canonical-ci-engineering
More help   : https://help.launchpad.net/ListHelp

Reply via email to