openstack
/
charm-nova-compute
Code Issues Proposed changes

Allow access to secure uuidd socket 

Nova uses python libraries, which uses libuuid in order to generate
UUIDs. The apparmor profile does not allow for the nova-compute service
to access the /run/uuidd/request socket in order to generate a secure
UUID. Update the apparmor profile to allow nova to use the uuid service.

Closes-Bug: #1958689
Change-Id: I2ec6e7aba5c84c697733227ce36f762e4787cce1
This commit is contained in:
Billy Olsen 2022-01-21 15:57:37 -07:00
parent f4eeb0650a
commit 958e054694
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/usr.bin.nova-compute
View File

@ -78,6 +78,7 @@
/run/lock/nova/nova-iptables wk,
/run/lock/qemu-nbd-nbd* w,
/run/openvswitch/db.sock rw,
/run/uuidd/request rw,
/{usr/,}sbin/blockdev rix,
/{usr/,}sbin/brctl rix,
/{usr/,}sbin/iscsiadm rix,