bind all services not required by the nodes to the loopback interface or add ingress firewall rules for these services
Bug #975450 reported by
Jamie Strandboge
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Fix Released
|
Critical
|
Jeroen T. Vermeulen | ||
txlongpoll |
Fix Released
|
Critical
|
Julian Edwards | ||
maas (Ubuntu) |
Triaged
|
High
|
Andres Rodriguez | ||
Precise |
Won't Fix
|
High
|
kavya | ||
txlongpoll (Ubuntu) |
Won't Fix
|
Undecided
|
Andres Rodriguez | ||
Precise |
Won't Fix
|
Undecided
|
Unassigned |
Bug Description
This is a tracking bug for a dependency of the maas MIR (bug #961344).
For 12.04, bind all services not required by the nodes to the loopback interface (like with postgresql). This includes mass-pserv, maas-txlongpoll, epmd, and rabbitmq and anything else that is added between now and release. If this cannot be done, add explict firewall rules (I suggest in a 'maas' chain to make this play nice with other rulesets) for these open ports.
Related branches
lp://qastaging/~jtv/maas/bug-977752
- Gavin Panella (community): Approve
-
Diff: 153 lines (+64/-38)3 files modifiedetc/pserv.yaml (+6/-0)
src/provisioningserver/plugin.py (+57/-38)
src/provisioningserver/tests/test_plugin.py (+1/-0)
tags: | added: rls-p-tracking |
Changed in maas (Ubuntu Precise): | |
milestone: | none → ubuntu-12.04 |
status: | New → Triaged |
security vulnerability: | no → yes |
security vulnerability: | yes → no |
Changed in maas: | |
status: | New → Triaged |
importance: | Undecided → Critical |
Changed in maas: | |
assignee: | nobody → Jeroen T. Vermeulen (jtv) |
status: | Triaged → Fix Released |
Changed in maas (Ubuntu Precise): | |
importance: | Undecided → High |
Changed in txlongpoll: | |
status: | New → In Progress |
importance: | Undecided → Critical |
assignee: | nobody → Julian Edwards (julian-edwards) |
Changed in txlongpoll (Ubuntu Precise): | |
status: | New → Confirmed |
Changed in maas (Ubuntu): | |
assignee: | nobody → Andres Rodriguez (andreserl) |
Changed in txlongpoll (Ubuntu): | |
assignee: | nobody → Andres Rodriguez (andreserl) |
Changed in maas (Ubuntu Precise): | |
assignee: | nobody → kavya (kavyamensin123) |
Changed in txlongpoll (Ubuntu): | |
status: | Confirmed → Won't Fix |
Changed in txlongpoll (Ubuntu Precise): | |
status: | Confirmed → Won't Fix |
To post a comment you must log in.
Split off the pserv & txlongpoll parts as bug 977752 (we can do these within the MAAS code).