a757db28fb
We've treated "admin-only" exploitable bugs as security hardening opportunities since there are countless ways a system-wide administrator can cause trouble in an OpenStack deployment. Our projects often make no attempt to guarantee that administrator API functions are safe from granting access at the operating system level (see unfinished rootwrap/privsep transition), and admin privileges should never be granted to untrusted users. Change-Id: I3f1ded8c991308ee6d30449428b780895223d0b5 Signed-off-by: Jeremy Stanley <fungi@yuggoth.org>
Records of each security advisory issued by the OpenStack VMT https://security.openstack.org