i think sunstone is not release yet ? how to get source of it .. it only shows screenshot here.

http://blog.opennebula.org/?p=1344
On 02/25/2011 03:01 PM, Danny Sternkopf wrote:
Yep, it is definately a major security risk.
The sunstone WebGUI has a user limited view in contrast.


On 2011-02-25 15:58, Zeeshan Ali Shah wrote:
wow, i think user can see each other VM , definately they cannot delete
them , but they can even look into  other vms with onevm show..

is it normal ?   also user can see onehost list and onevnet show.

which is bit issue as user can poke into infrastructure.

with User i mean , normal user you create with oneuser create command

do these concern a security risk ?




--
Regards

Zeeshan Ali Shah
System Administrator
PDC-Center for High Performance Computing
KTH-Royal Institute of Technology , Sweden
+46 8 790 9115

_______________________________________________
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org

Reply via email to