[Bug 2042744] Re: su -s /bin/sh -c "keystone-manage db_sync" keystone

[Jeremy Stanley]

When switching a bug's type from Public to Public Security, please
clarify what about it leads you to suspect it represents an exploitable
vulnerability. I'm switching it back to a regular Public bug in the
meantime.

If this was triggered by the earlier mention of a use-after-free
condition, it didn't seem to imply that the underlying bug was inside
keystone, but maybe should be filed against the eventlet project
instead.

** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/2042744

Title:
  su -s /bin/sh -c "keystone-manage db_sync" keystone

Status in OpenStack Identity (keystone):
  Confirmed
Status in keystone package in Ubuntu:
  Confirmed

Bug description:
  When I execute su -s /bin/sh -c "keystone-manage db_sync" keystone

  I am receiving below error

  Exception ignored in: <function _removeHandlerRef at 0x7f01819b43a0>
  Traceback (most recent call last):
    File "/usr/lib/python3.10/logging/__init__.py", line 846, in _removeHandlerRef
    File "/usr/lib/python3.10/logging/__init__.py", line 226, in _acquireLock
    File "/usr/lib/python3.10/threading.py", line 164, in acquire
    File "/usr/lib/python3/dist-packages/eventlet/green/thread.py", line 34, in get_ident
  AttributeError: 'NoneType' object has no attribute 'getcurrent'

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/2042744/+subscriptions