mirror of
				https://github.com/apache/cloudstack.git
				synced 2025-11-04 00:02:37 +01:00 
			
		
		
		
	bug 13033: security rule prevents console access
This commit is contained in:
		
							parent
							
								
									d65c6e765d
								
							
						
					
					
						commit
						af667d26b7
					
				@ -452,14 +452,6 @@ def default_ebtables_rules():
 | 
				
			|||||||
    except:
 | 
					    except:
 | 
				
			||||||
        util.SMlog('Chain DEFAULT_EBTABLES already exists')
 | 
					        util.SMlog('Chain DEFAULT_EBTABLES already exists')
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    #deny traffic from vms into hypervisor. Note: does not protect from vms in other pods
 | 
					 | 
				
			||||||
    try:
 | 
					 | 
				
			||||||
        util.pread2(['ebtables', '-D',  'INPUT', '-s', '6:0:0:0:0:0/ff:0:0:0:0:0', '-j', 'DROP'])
 | 
					 | 
				
			||||||
    except:
 | 
					 | 
				
			||||||
        pass
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
    util.pread2(['ebtables', '-A',  'INPUT', '-s', '6:0:0:0:0:0/ff:0:0:0:0:0', '-j', 'DROP'])
 | 
					 | 
				
			||||||
    
 | 
					 | 
				
			||||||
 | 
					
 | 
				
			||||||
@echo
 | 
					@echo
 | 
				
			||||||
def allow_egress_traffic(session):
 | 
					def allow_egress_traffic(session):
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user