In the previous two posts of this series, we explored the deficiencies of the current model and the features of an alternative implementation. In this last post, we'll discuss the advantages of a Python implementation and open discussion on how to secure it properly.
It's quite easy to …
In the previous post in this series we explored the current privilege escalation model used in OpenStack Compute (Nova), and discussed its limitations. Now that we are able to plug an alternative model (thanks to the root_helper option), we'll discuss in this post what features this one should have. If …
In this series, I'll discuss how to strengthen the privilege escalation model for OpenStack Compute (Nova). Due to the way networking, virtualization and volume management work, some Nova nodes need to be able to run some commands as root. To reduce the effects of a potential compromise (attacker being able …
Last week saw the delivery of the first milestone of the Essex development cycle for Keystone, Glance, Horizon and Nova. This early milestone collected about two months of post-Diablo work... but it's not as busy in new features as most would think, since a big part of those last two …
The OpenStack Essex Design Summit just ended, and several people those last three days have asked me to give a bit more substance to what I exactly meant by "Strategic contributions" in my last article. Ensure the long-term health of the project by investing in project-centered resources, right, but what …