Comment 47 for bug 1546507
Revision history for this message
| Andrew Laski (alaski) wrote Re: Regular user can delete any image file | #47 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
9199653
demo site
(Get the code!)
I do not see that this has anything to do with the Glance v1->v2 work in Nova. Nova does not allow creating images with custom locations or updating an image location so it is not an attack vector here.
Nova is dependent on Glance v1 currently and is a reason that it can't be thrown in a fire and this vulnerability ignored, but it is not the only reason that Glance v1 still exists and should be fixed.