[
https://issues.apache.org/jira/browse/CLOUDSTACK-10230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16468630#comment-16468630
]
ASF subversion and git services commented on CLOUDSTACK-10230:
--------------------------------------------------------------
Commit 4534cefa40cf9b4d11402bff86c4484292fa660d in cloudstack's branch
refs/heads/4.11 from [~rohithsharma]
[ https://gitbox.apache.org/repos/asf?p=cloudstack.git;h=4534cef ]
backports for 4.11.1 from master (#2621)
* CLOUDSTACK-10147 Disabled Xenserver Cluster can still deploy VM's. Added code
to skip disabled clusters when selecting a host (#2442)
(cherry picked from commit c3488a51db4bce4ec32c09e6fef78193d360cf3f)
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* CLOUDSTACK-10318: Bug on sorting ACL rules list in chrome (#2478)
(cherry picked from commit 4412563f19ec8b808fe4c79e2baf658507a84873)
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* CLOUDSTACK-10284:Creating a snapshot from VM Snapshot generates error if
hypervisor is not KVM.
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* CLOUDSTACK-10221: Allow IPv6 when creating a Basic Network (#2397)
Since CloudStack 4.10 Basic Networking supports IPv6 and thus
should be allowed to be specified when creating a network.
Signed-off-by: Wido den Hollander <w...@widodh.nl>
(cherry picked from commit 9733a10ecda5f1af0f2c0fa863fc976a3e710946)
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* CLOUDSTACK-10214: Unable to remove local primary storage (#2390)
Allow admins to remove primary storage pool.
Cherry-picked from eba2e1d8a1ce4e86b4df144db03e96739da455e5
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* dateutil: constistency of tzdate input and output (#2392)
Signed-off-by: Yoan Blanc <yoan.bl...@exoscale.ch>
Signed-off-by: Daan Hoogland <daan.hoogl...@shapeblue.com>
(cherry picked from commit 2ad520282319da9a03061b8c744e51a4ffdf94a2)
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* CLOUDSTACK-10054:Volume download times out in 3600 seconds (#2244)
(cherry picked from commit bb607d07a97476dc4fb934b3d75df6affba47086)
Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>
* When creating a new account (via domain admin) it is possible to select “root
admin” as the role for the new user (#2606)
* create account with domain admin showing 'root admin' role
Domain admins should not be able to assign the role of root admin to new users.
Therefore, the role ‘root admin’ (or any other of the same type) should not be
visible to domain admins.
* License and formatting
* Break long sentence into multiple lines
* Fix wording of method 'getCurrentAccount'
* fix typo in variable name
* [CLOUDSTACK-10259] Missing float part of secondary storage data in
listAccounts
* [CLOUDSTACK-9338] ACS not accounting resources of VMs with custom service
offering
ACS is accounting the resources properly when deploying VMs with custom service
offerings. However, there are other methods (such as updateResourceCount) that
do not execute the resource accounting properly, and these methods update the
resource count for an account in the database. Therefore, if a user deploys VMs
with custom service offerings, and later this user calls the
“updateResourceCount” method, it (the method) will only account for VMs with
normal service offerings, and update this as the number of resources used by
the account. This will result in a smaller number of resources to be accounted
for the given account than the real used value. The problem becomes worse
because if the user starts to delete these VMs, it is possible to reach
negative values of resources allocated (breaking all of the resource limiting
for accounts). This is a very serious attack vector for public cloud providers!
* [CLOUDSTACK-10230] User should not be able to use removed “Guest OS type”
(#2404)
* [CLOUDSTACK-10230] User is able to change to “Guest OS type” that has been
removed
Users are able to change the OS type of VMs to “Guest OS type” that has been
removed. This becomes a security issue when we try to force users to use HVM
VMs (Meltdown/Spectre thing). A removed “guest os type” should not be usable by
any users in the cloud.
* Remove trailing lines that are breaking build due to checkstyle compliance
* Remove unused imports
* fix classes that were in the wrong folder structure
* Updates to capacity management
> User is able to change to “Guest OS type” that has been removed
> ----------------------------------------------------------------
>
> Key: CLOUDSTACK-10230
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10230
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Reporter: Rafael Weingärtner
> Assignee: Rafael Weingärtner
> Priority: Critical
> Fix For: 4.12
>
>
> Users are able to change the OS type of VMs to “Guest OS type” that has been
> removed. This becomes a security issue when we try to force users to use HVM
> VMs (Meltdown/Spectre thing). A removed “guest os type” should not be usable
> by any users in the cloud.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
