From af667d26b74aaf2557dd63e54430e9374b31f8b5 Mon Sep 17 00:00:00 2001 From: Chiradeep Vittal Date: Thu, 12 Jan 2012 15:34:09 -0800 Subject: [PATCH] bug 13033: security rule prevents console access --- scripts/vm/hypervisor/xenserver/vmops | 8 -------- 1 file changed, 8 deletions(-) diff --git a/scripts/vm/hypervisor/xenserver/vmops b/scripts/vm/hypervisor/xenserver/vmops index 11f12ff62f2..0f47508cd41 100755 --- a/scripts/vm/hypervisor/xenserver/vmops +++ b/scripts/vm/hypervisor/xenserver/vmops @@ -452,14 +452,6 @@ def default_ebtables_rules(): except: util.SMlog('Chain DEFAULT_EBTABLES already exists') - #deny traffic from vms into hypervisor. Note: does not protect from vms in other pods - try: - util.pread2(['ebtables', '-D', 'INPUT', '-s', '6:0:0:0:0:0/ff:0:0:0:0:0', '-j', 'DROP']) - except: - pass - - util.pread2(['ebtables', '-A', 'INPUT', '-s', '6:0:0:0:0:0/ff:0:0:0:0:0', '-j', 'DROP']) - @echo def allow_egress_traffic(session):