Backport #48637
Updated by Patrick Donnelly over 3 years ago
<pre>
commit 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05 upstream/heads/octopus (upstream/heads/octopus)
gpg: Signature made Wed 16 Dec 2020 08:21:46 AM PST
gpg: using RSA key 88AD60FFD3FC04B6DB87CBAC3A2A7E25BEA8AADB
gpg: Good signature from "Patrick Joseph Donnelly (Hacker) <batrick@batbytes.com>" [ultimate]
gpg: aka "Patrick Joseph Donnelly (Software Engineer) <pdonnell@redhat.com>" [ultimate]
Merge: e8cafbfec3e effb5942959
Author: Patrick Donnelly <pdonnell@redhat.com>
Date: Wed Dec 16 08:21:26 2020 -0800
Merge branch 'CVE-2020-27781-octopus' into octopus
* CVE-2020-27781-octopus:
tasks/cephfs/test_volume_client: Add tests for authorize/deauthorize
pybind/ceph_volume_client: Optionally authorize existing auth-ids
pybind/ceph_volume_client: Preserve existing caps while authorize/deauthorize auth-id
pybind/ceph_volume_client: Disallow authorize auth_id
Reviewed-by: Ramana Raja <rraja@redhat.com>
Reviewed-by: Kotresh Hiremath Ravishankar <khiremat@redhat.com>
</pre>