]> review.fuel-infra Code Review - openstack-build/neutron-build.git/commit
Fix lack of device ownership enforcement for DVR routers
authorarmando-migliaccio <armamig@gmail.com>
Fri, 6 Feb 2015 00:27:52 +0000 (16:27 -0800)
committerarmando-migliaccio <armamig@gmail.com>
Mon, 9 Feb 2015 20:30:09 +0000 (12:30 -0800)
commit89025a8dd93918ac2967726ec7bb8ee5aa22d924
treeb7b78ca187644da6dbbb28c1a664326f1048ca51
parentca458c4f2018b2393e5439ea2e0aa2c1dc381e0a
Fix lack of device ownership enforcement for DVR routers

The enforcement rule was applied to centralized router interfaces, to avoid
a potential security vulnerabilty.

Even though DVR routers are fundamentally different from centralized routers,
there is no good reason as to why the rule should be skipped for DVR interfaces.

This patch sanitizes the insanity a bit and closes this potential loophole by
preventing the operation for DVR routers too.

Related-bug: #1243327
Closes-bug: #1410984

Change-Id: I048e6e3926e1c74cf9ecb63cfb53a0b1afb3c579
neutron/db/db_base_plugin_v2.py
neutron/tests/unit/test_l3_plugin.py