)]}'
{"etc/nova/rootwrap.d/compute.filters":[{"author":{"_account_id":4190,"name":"lifeless","email":"robertc@robertcollins.net","username":"lifeless"},"change_message_id":"8a2f65363ce8a85a7e975d1999ee8fffd727e351","unresolved":false,"context_lines":[{"line_number":176,"context_line":"# nova/utils.py:read_file_as_root: \u0027cat\u0027, file_path"},{"line_number":177,"context_line":"# (called from nova/virt/disk/vfs/localfs.py:VFSLocalFS.read_file)"},{"line_number":178,"context_line":"read_passwd: RegExpFilter, cat, root, cat, (/[^/]+)+/etc/passwd"},{"line_number":179,"context_line":"read_shadow: RegExpFilter, cat, root, cat, (/[^/]+)+/etc/shadow"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"AAAAM3%2F%2FeaI%3D","line":179,"updated":"2013-01-20 22:31:08.000000000","message":"Is this always under /tmp ? Might be nice to tie it down a little (because e.g. lxc has the same sensitive files in /var/lib/lxc/*/rootfs/etc/shadow.","commit_id":"092da458fb959251c3e4739bb37713ce57a44c13"},{"author":{"_account_id":3068,"name":"Arata Notsu","email":"notsu@virtualtech.jp","username":"arata776"},"change_message_id":"c8fdcec31f7330066f3e9305fa549f1438b015fc","unresolved":false,"context_lines":[{"line_number":176,"context_line":"# nova/utils.py:read_file_as_root: \u0027cat\u0027, file_path"},{"line_number":177,"context_line":"# (called from nova/virt/disk/vfs/localfs.py:VFSLocalFS.read_file)"},{"line_number":178,"context_line":"read_passwd: RegExpFilter, cat, root, cat, (/[^/]+)+/etc/passwd"},{"line_number":179,"context_line":"read_shadow: RegExpFilter, cat, root, cat, (/[^/]+)+/etc/shadow"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"AAAAM3%2F%2FeNA%3D","line":179,"in_reply_to":"AAAAM3%2F%2FeaI%3D","updated":"2013-01-21 07:24:00.000000000","message":"/tmp can be /var/tmp, /usr/tmp, or one that is specified by env. However, in most cases, regexp used in patchset 5 would work.","commit_id":"092da458fb959251c3e4739bb37713ce57a44c13"}]}