If you install Openstack using ipv4 but without disabling ipv6 (like almost all distrib) a VM in any tenant is able to connect to every daemon listening in ipv6 on the compute (ssh, libvirt and ...). This is du to the interfaces in the linux bridge attach to the VM which have ipv6 adresses by default and then are listening like all interfaces of the host. To do this, you just have to configure an ipv6 address on a VM of a tenant. To protect, you can just disable ipv6 or configure all daemon on the compute to listen only on ipv4 adresses
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
