openstack/puppet-openstack-integration
Code Issues Proposed changes

[CVE-2018-1000115] memcached: restrict to TCP

Browse Source 
https://access.redhat.com/security/cve/cve-2018-1000115

Restrict Memcached to only work on TCP.
The configuration only binds memcached on localhost but in case it
changes, we'll prevent DDoS amplification attacks.

Change-Id: Ib87b41b9f22549ec49788721b5806c972f3c5d2f
This commit is contained in:
Emilien Macchi 2018-03-09 22:33:38 +01:00
parent 60e2459462
commit 5210dd7903
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
manifests/memcached.pp
View File

@ -2,6 +2,7 @@ class openstack_integration::memcached {
include ::openstack_integration::config
class { '::memcached':
listen_ip => $::openstack_integration::config::host
listen_ip => $::openstack_integration::config::host,
udp_port => 0,
}
}