ceilometer/releasenotes/notes/switch-to-oslo-privsep-b58f20a279f31bc0.yaml
zhurong bd0d5a8a27 Switch to oslo privsep
Please reference here:
https://docs.openstack.org/oslo.privsep/latest/user/index.html#converting-from-rootwrap-to-privsep

Change-Id: I5db0e64ec38d912f907b4ad483562120d030d726
2019-04-28 11:09:05 +08:00

16 lines
607 B
YAML

---
security:
- |
Privsep transitions. Ceilometer is transitioning from using the older
style rootwrap privilege escalation path to the new style Oslo privsep
path. This should improve performance and security of Ceilometer
in the long term.
- |
Privsep daemons are now started by Ceilometer when required. These
daemons can be started via rootwrap if required. rootwrap configs
therefore need to be updated to include new privsep daemon invocations.
upgrade:
- |
The following commands are no longer required to be listed in your rootwrap
configuration: ipmitool.