openstack/charm-neutron-gateway
Code Issues Proposed changes

adds missing entries in the apparmor profiles

Browse Source 
Change-Id: I030ccdd267f67844ff2cea328ae1d3d0275c949b
This commit is contained in:
Martin Hellström 2017-07-06 09:55:24 +02:00 committed by Dmitrii Shcherbakov
parent 36f4269596
commit 4e4597e591
5 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/usr.bin.neutron-dhcp-agent
View File

@ -15,11 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/run/uuidd/request rw,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

5
templates/usr.bin.neutron-l3-agent
View File

@ -15,11 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/run/uuidd/request rw,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

3
templates/usr.bin.neutron-metadata-agent
View File

@ -15,11 +15,14 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

4
templates/usr.bin.neutron-metering-agent
View File

@ -15,12 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this
# is limited by the appropriate rootwrap configuration.

4
templates/usr.bin.neutron-openvswitch-agent
View File

@ -15,6 +15,7 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/etc/udev/udev.conf r,
/var/lib/neutron/** rwk,
@ -25,6 +26,9 @@
/run/uuidd/request rw,
/sys/kernel/uevent_seqnum r,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this
# is limited by the appropriate rootwrap configuration.