Comment 1 for bug 1489111

Revision history for this message
Kevin Benton (kevinbenton) wrote : Re: IP, MAC, and DHCP spoofing rules can by bypassed by changing device_owner

Hi,

I have a attached a patch that fixes the problem.

It enables a regex match in the policy engine and then changes the default policy to prevent users from using the 'network:' prefix in the device_owner field unless they own the network, have the advanced services role, or are an admin.