Cloudstack Source code
Go to file
Rohit Yadav c116ca968e CLOUDSTACK-8613, CLOUDSTACK-6301: Dump KVM domain XML with secure flag
When dumping XML use appropriate flags:

1, VIR_DOMAIN_XML_SECURE (dump security sensitive information too)
8, VIR_DOMAIN_XML_MIGRATABLE (dump XML suitable for migration)

Source:
https://libvirt.org/html/libvirt-libvirt-domain.html#virDomainXMLFlags

This fixes CVE 2015-3252: VNC password lost during VM migration across KVM
hosts. The issue is also seen when a VM is rebooted.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit cb2aca7516)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

Conflicts:
	plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/resource/LibvirtComputingResource.java
2015-08-14 10:52:58 +05:30
agent cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
agent-simulator/tomcatconf CLOUDSTACK-4285: configure simulator API not discovered 2013-08-13 18:04:08 +05:30
api api: avoid sending sensitive data in api response 2015-03-11 16:37:33 +05:30
awsapi awsapi: fix duplicate variable 2015-01-27 12:00:56 +05:30
awsapi-setup CLOUDSTACK-1444. Fixing cloudstack-aws-api-register to set ec2 api version to the latest. [Support for EC2 API version 2012-08-15] 2013-07-04 10:08:48 +05:30
build CLOUDSTACK-2033 Fix usage server startup and logging 2013-04-16 10:52:49 +02:00
client CLOUDSTACK-8160: use preferable protocols 2015-01-21 18:24:54 +05:30
cloud-cli small fix to make this work with spaces in names 2012-09-22 13:43:57 +02:00
core cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
debian debian: add version entry for 4.3.2 2014-12-12 05:30:52 +05:30
deps cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
developer cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
docs/.tx Removing docs from master 2013-10-08 15:25:05 -04:00
engine CLOUDSTACK-8160: use preferable protocols 2015-01-21 18:24:54 +05:30
framework cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
maven-standard cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
packaging CLOUDSTACK-7951: Limit amount of memory used by cloudstack-agent jsvc 2014-11-25 18:03:53 +05:30
parents/checkstyle cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
plugins CLOUDSTACK-8613, CLOUDSTACK-6301: Dump KVM domain XML with secure flag 2015-08-14 10:52:58 +05:30
python CLOUDSTACK-7633: fix "Provides" in most LSB headers 2014-09-25 16:56:19 +02:00
quickcloud cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30
scripts CLOUDSTACK-5446: 2014-11-26 23:43:59 +05:30
server server: remove unused import in ImageStoreJoinDaoImpl 2015-03-11 17:29:17 +05:30
services use a preferable protocol that works on jvm 1.6 2015-01-28 13:41:00 +05:30
setup schema: fix foreign key checks for 3.0.7 to 4.1.0 upgrade path 2015-05-13 14:13:48 +02:00
systemvm systemvm: avoid tcp responses with timestamp 2015-03-09 17:15:48 +05:30
test CLOUDSTACK-8160: use preferable protocols 2015-01-21 18:24:54 +05:30
tools appliance: hold on to openswan version, don't upgrade 2015-01-28 23:21:47 +05:30
ui api: avoid sending sensitive data in api response 2015-03-11 16:37:33 +05:30
usage CLOUDSTACK-8166: add boundary checks in various usage parsers 2015-01-18 17:15:14 +05:30
utils improve protocol enabling based on socket object type 2015-02-05 15:49:53 +05:30
vmware-base CLOUDSTACK-8160: use preferable protocols 2015-01-21 18:24:54 +05:30
.gitignore CLOUDSTACK-5296: Add certificate chain support for netscaler. 2013-12-12 12:13:43 +05:30
.travis.yml modify travis file to force true on test execution. The XML parser will determine failures 2014-11-23 04:45:03 +00:00
CHANGES.md CHANGES: update changes file 2014-12-12 20:36:51 +05:30
CONTRIBUTING.md Add CONTRIBUTING instructions 2015-04-03 10:45:24 +02:00
Dockerfile Add Dockerfile for simulator 2015-03-04 11:56:24 +01:00
INSTALL.md Fix the spec file for the noredist build 2013-09-21 14:42:31 +08:00
LICENSE Adding httpclient ssl source files to legal documentation 2013-08-26 12:36:59 -04:00
NOTICE CLOUDSTACK-1233: Fixed veewee config file legal documentation 2013-02-11 21:40:06 -05:00
README.md Add CONTRIBUTING instructions 2015-04-03 10:45:24 +02:00
README.tools.md Fix top level files to use new git repo, url and MLs 2013-03-26 11:26:24 +05:30
configure-info.in License header updates for misc files 2012-08-03 14:51:41 -04:00
pom.xml Add CONTRIBUTING instructions 2015-04-03 10:45:24 +02:00
supervisord.conf Add Dockerfile for simulator 2015-03-04 11:56:24 +01:00
version-info.in No more ant_args 2012-09-03 14:13:50 +02:00

README.md

Apache CloudStack Version 4.3.0

Build Status

About Apache CloudStack

Apache CloudStack is software designed to deploy and manage large networks of virtual machines, as a highly available, highly scalable Infrastructure as a Service (IaaS) cloud computing platform. CloudStack is used by a number of service providers to offer public cloud services, and by many companies to provide an on-premises (private) cloud offering.

Apache CloudStack currently supports the most popular hypervisors: VMware, Oracle VM, KVM, XenServer and Xen Cloud Platform. CloudStack also offers bare metal management of servers, using PXE to provision OS images and IPMI to manage the server. Apache CloudStack offers three methods for managing cloud computing environments: an easy to use Web interface, command line tools, and a full-featured RESTful API.

Visit us at Apache CloudStack.

Mailing lists

Development Mailing List Users Mailing List Commits Mailing List Issues Mailing List Marketing Mailing List

License

Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Building CloudStack

Notice of Cryptographic Software

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See http://www.wassenaar.org/ for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

The following provides more details on the included cryptographic software:

CloudStack makes use of JaSypt cryptographic libraries

CloudStack has a system requirement of MySQL, and uses native database encryption functionality.

CloudStack makes use of the Bouncy Castle general-purpose encryption library.

CloudStack can optionally interacts with and controls OpenSwan-based VPNs.

CloudStack has a dependency on Apache WSS4J as part of the AWSAPI implementation.

CloudStack has a dependency on and makes use of JSch - a java SSH2 implementation.