yahoo-eng-team team mailing list archive

[Brant Knudson <bknudson@xxxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:


By default keystone will listen on all interfaces. Keystone should use secure defaults. In this case, listen on localhost-only by default.

** Affects: keystone
     Importance: Undecided
     Assignee: Brant Knudson (blk-u)
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1424061

Title:
  keystone server should default to localhost-only

Status in OpenStack Identity (Keystone):
  New

Bug description:
  
  By default keystone will listen on all interfaces. Keystone should use secure defaults. In this case, listen on localhost-only by default.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1424061/+subscriptions