[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/371920 Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=0d4438368fd769a0e6b83bfdaf1cb980f888c504 Submitter: Zuul Branch:master commit 0d4438368fd769a0e6b83bfdaf1cb980f888c504 Author: Iswarya_Vakati

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/513665 Committed: https://git.openstack.org/cgit/openstack/designate/commit/?id=440a67cab18e3ab725383d01b4ed26fa3b1d3da0 Submitter: Zuul Branch:master commit 440a67cab18e3ab725383d01b4ed26fa3b1d3da0 Author: Jens Harbott Date: Fri

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/371930 Committed: https://git.openstack.org/cgit/openstack/ec2-api/commit/?id=f8dbd1cc45a1ceeedebf80607ef72eaaaba174a9 Submitter: Jenkins Branch:master commit f8dbd1cc45a1ceeedebf80607ef72eaaaba174a9 Author: Iswarya_Vakati

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

** Also affects: nova/newton Importance: Undecided Status: New ** Changed in: nova/newton Importance: Undecided => Medium ** Changed in: nova/newton Status: New => In Progress ** Changed in: nova/newton Assignee: (unassigned) => Lee Yarwood (lyarwood) ** Changed in:

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/352866 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=87530b6e674750ab0d55b70cce4d96bf26d1f49a Submitter: Jenkins Branch:master commit 87530b6e674750ab0d55b70cce4d96bf26d1f49a Author: Markus Zoeller Date:

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/371915 Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=a2839788e4ff74aa083c71c35755bc80579f17bb Submitter: Jenkins Branch:master commit a2839788e4ff74aa083c71c35755bc80579f17bb Author: pallavi Date:

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Consensus seems to confirm Tristan's observation this meets the VMT's class D report (security hardening) definition, so I'm marking our advisory task Won't Fix and annotating the bug status and tags accordingly. If the situation is discovered to be explicitly vulnerable after all, we can revisit

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Reviewed: https://review.openstack.org/368319 Committed: https://git.openstack.org/cgit/openstack/masakari/commit/?id=53d9c2613d734a48b0f0b30944bfd47ef5c1b06f Submitter: Jenkins Branch:master commit 53d9c2613d734a48b0f0b30944bfd47ef5c1b06f Author: Takashi Kajinami

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. It seems like a class D type

[Yahoo-eng-team] [Bug 1611171] Re: re-runs self via sudo

Apparantly, this isn't unique to Designate either: http://git.openstack.org/cgit/openstack/cinder/tree/cinder/cmd/manage.py http://git.openstack.org/cgit/openstack/nova/tree/nova/cmd/manage.py ** Also affects: nova Importance: Undecided Status: New ** Also affects: cinder