openstack/charm-neutron-gateway
Code Issues Proposed changes

Merge "adds missing entries in the apparmor profiles"

Browse Source
This commit is contained in:
Jenkins 2017-07-20 06:39:49 +00:00 committed by Gerrit Code Review
commit d7f14a69ba
5 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/usr.bin.neutron-dhcp-agent
View File

@ -15,11 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/run/uuidd/request rw,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

5
templates/usr.bin.neutron-l3-agent
View File

@ -15,11 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/run/uuidd/request rw,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

3
templates/usr.bin.neutron-metadata-agent
View File

@ -15,11 +15,14 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this

4
templates/usr.bin.neutron-metering-agent
View File

@ -15,12 +15,16 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/var/lib/neutron/** rwk,
/var/log/neutron/** rwk,
/{,var/}run/neutron/** rwk,
/{,var/}run/lock/neutron/** rwk,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this
# is limited by the appropriate rootwrap configuration.

4
templates/usr.bin.neutron-openvswitch-agent
View File

@ -15,6 +15,7 @@
/{,usr/}bin/** rix,
/etc/neutron/** r,
/etc/magic r,
/etc/mime.types r,
/etc/udev/udev.conf r,
/var/lib/neutron/** rwk,
@ -25,6 +26,9 @@
/run/uuidd/request rw,
/sys/kernel/uevent_seqnum r,
/usr/share/file/magic.mgc r,
/usr/share/file/magic/ r,
# Allow unconfined sudo to support oslo.rootwrap
# profile makes no attempt to restrict this as this
# is limited by the appropriate rootwrap configuration.