[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Jeremy Stanley
I've switched this to a regular public bug and marked the security advisory task "won't fix" since this doesn't seem to represent an exploitable security vulnerability on its own. It may indicate incomplete Neutron documentation around caveats of "downing" a network, and could also be seen as a sec

[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Kevin Benton
Not a vulnerability. We don't document anywhere that setting admin_state_up to False is supposed to stop all traffic from flowing. ** Changed in: neutron Status: New => Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed t

[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Jeremy Stanley
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Also affects: ossa Import