Backport #48637: octopus: pybind/ceph_volume_client: allows authorize on auth_ids not created through ceph_volume_client - CephFS - Ceph

Actions

Copy link

Backport #48637

closed

octopus: pybind/ceph_volume_client: allows authorize on auth_ids not created through ceph_volume_client

Added by Backport Bot over 3 years ago. Updated over 3 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Patrick Donnelly

Target version:

Ceph - v15.2.8

Release:

octopus

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

commit 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05 upstream/heads/octopus (upstream/heads/octopus)
gpg: Signature made Wed 16 Dec 2020 08:21:46 AM PST
gpg:                using RSA key 88AD60FFD3FC04B6DB87CBAC3A2A7E25BEA8AADB
gpg: Good signature from "Patrick Joseph Donnelly (Hacker) <batrick@batbytes.com>" [ultimate]
gpg:                 aka "Patrick Joseph Donnelly (Software Engineer) <pdonnell@redhat.com>" [ultimate]
Merge: e8cafbfec3e effb5942959
Author: Patrick Donnelly <pdonnell@redhat.com>
Date:   Wed Dec 16 08:21:26 2020 -0800

    Merge branch 'CVE-2020-27781-octopus' into octopus

    * CVE-2020-27781-octopus:
      tasks/cephfs/test_volume_client: Add tests for authorize/deauthorize
      pybind/ceph_volume_client: Optionally authorize existing auth-ids
      pybind/ceph_volume_client: Preserve existing caps while authorize/deauthorize auth-id
      pybind/ceph_volume_client: Disallow authorize auth_id

    Reviewed-by: Ramana Raja <rraja@redhat.com>
    Reviewed-by: Kotresh Hiremath Ravishankar <khiremat@redhat.com>

Related issues 1 (0 open — 1 closed)