summaryrefslogtreecommitdiff
path: root/keystoneclient/common/cms.py
diff options
context:
space:
mode:
Diffstat (limited to 'keystoneclient/common/cms.py')
-rw-r--r--keystoneclient/common/cms.py10
1 files changed, 8 insertions, 2 deletions
diff --git a/keystoneclient/common/cms.py b/keystoneclient/common/cms.py
index 715aa10..704b645 100644
--- a/keystoneclient/common/cms.py
+++ b/keystoneclient/common/cms.py
@@ -60,9 +60,15 @@ def _ensure_subprocess():
if patcher.already_patched:
from eventlet.green import subprocess
else:
- import subprocess
+ import subprocess # nosec(cjschaef): we must be careful when
+ # using subprocess.Popen with possibly untrusted data,
+ # assumption is that the certificate/key files provided are
+ # trustworthy
except ImportError:
- import subprocess # noqa
+ import subprocess # noqa # nosec(cjschaef): we must be careful
+ # when using subprocess.Popen with possibly untrusted data,
+ # assumption is that the certificate/key files provided are
+ # trustworthy
def set_subprocess(_subprocess=None):