oslo.concurrency/oslo_concurrency
Yuriy Taraday 499d5aa36d Revert "Use tempfile.tempdir for lock_path if OSLO_LOCK_PATH is not set"
This reverts commit 5021ef82fd.

That commit set default location for lock files to a world-writable
directory (like /tmp) which violates security precaution stated right in
the help string of lock_path config variable: lock_path should be
writable by the user of the process using it only.

There is some history behind this:

- when we decided to not do tempfile.mkdtemp if lock_path were not set
  (because it was broken), it broke upgrades for all components
  (starting with Cinder;
- it was suggested to provide the same default value:
  https://review.openstack.org/60274
  but it was not accepted because it weakens security;
- there was a thread about this in ML, please read it for more history:
  http://lists.openstack.org/pipermail/openstack-dev/2013-December/021055.html
  it ended up with understanding that only a project using the library
  can provide sane default value for lock_path, not the library itself.

Change-Id: I801004ad3c83862849696f00c6e7ca9877fd496b
2016-02-26 16:36:17 +03:00
..
fixture Use versionadded and versionchanged in doc 2015-11-05 13:31:40 +01:00
locale Update translation setup 2016-01-28 20:41:28 +01:00
tests Make ProcessExecutionError picklable 2016-02-19 15:52:23 +11:00
__init__.py Move out of the oslo namespace package 2014-11-14 17:17:25 -05:00
_i18n.py Update translation setup 2016-01-28 20:41:28 +01:00
lockutils.py Revert "Use tempfile.tempdir for lock_path if OSLO_LOCK_PATH is not set" 2016-02-26 16:36:17 +03:00
opts.py Bump to hacking 0.10 2015-01-12 21:11:16 +00:00
prlimit.py Add prlimit parameter to execute() 2016-01-28 15:00:06 +01:00
processutils.py Make ProcessExecutionError picklable 2016-02-19 15:52:23 +11:00
watchdog.py Use versionadded and versionchanged in doc 2015-11-05 13:31:40 +01:00