[Bug 900553] Re: Any user can manage the keystone database via keystone-manage

Adam Gandelman 900553 at bugs.launchpad.net
Tue Dec 6 01:12:11 UTC 2011


On second look, /etc/keystone/keystone.conf ( like every other openstack
component) stores its database credentials as plain text sqlalchemy
string.  This is should be installed non-world readable.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/900553

Title:
  Any user can manage the keystone database via keystone-manage

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/900553/+subscriptions



More information about the Ubuntu-server-bugs mailing list