Web browser: ---
            Bug ID: 60289
           Summary: C_FORCE_ROOT is bad, change pickle as serialization
                    format for celery
           Product: Analytics
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: Wikimetrics
    Classification: Unclassified
   Mobile Platform: ---

To fix a recent bug I had to upgrade celery.  But this highlighted that we have
a security issue due to Celery running as root and pickle being the default
serialization format.  We need to:

1. stop running Celery as root (configure upstart)
2. stop using pickle as the serialization format

You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to