OpenStack Essex Design Summit

In this session we'll discuss the potential threats to Nova internal security and their mitigation, including: * Information disclosure Log files and configuration files contain clear text passwords. * Root escalation In Diablo the direct use of sudo was abstracted to allow to plug another root escalation wrapper. That leaves room for implementing a more secure root wrapper that would filter arguments more precisely.