Repository: cloudstack Updated Branches: refs/heads/4.3-forward e406adc08 -> e5c391fcf
KVM security bug: no forwarding rule applied Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/e5c391fc Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/e5c391fc Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/e5c391fc Branch: refs/heads/4.3-forward Commit: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb Parents: e406adc Author: Edison Su <sudi...@gmail.com> Authored: Fri Mar 14 14:40:48 2014 -0700 Committer: Edison Su <sudi...@gmail.com> Committed: Fri Mar 14 14:42:19 2014 -0700 ---------------------------------------------------------------------- scripts/vm/network/security_group.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e5c391fc/scripts/vm/network/security_group.py ---------------------------------------------------------------------- diff --git a/scripts/vm/network/security_group.py b/scripts/vm/network/security_group.py index a7c64b0..f1ed76e 100755 --- a/scripts/vm/network/security_group.py +++ b/scripts/vm/network/security_group.py @@ -978,7 +978,7 @@ def addFWFramework(brname): execute("iptables -N " + brfwin) try: - refs = execute("""iptables -n -L " + brfw + " | awk '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip() + refs = execute("""iptables -n -L %s | awk '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw,brfw)).strip() if refs == "0": execute("iptables -I FORWARD -i " + brname + " -j DROP") execute("iptables -I FORWARD -o " + brname + " -j DROP")
