openstack
/
charm-nova-compute
Code Issues Proposed changes

Merge "Add apparmor rule to support /usr/sbin"

This commit is contained in:
Zuul 2021-05-07 20:38:31 +00:00 committed by Gerrit Code Review
parent d1bd93b6c5 120235f359
commit ddc6662aba
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
templates/usr.bin.nova-compute
View File

@ -74,20 +74,20 @@
/run/lock/nova/nova-iptables wk,
/run/lock/qemu-nbd-nbd* w,
/run/openvswitch/db.sock rw,
/sbin/blockdev rix,
/sbin/brctl rix,
/sbin/iscsiadm rix,
/sbin/ldconfig rix,
/sbin/ldconfig.real rix,
/sbin/mkfs rix,
/sbin/mkfs.fat rix,
/sbin/hdparm rix,
/sbin/xtables-multi rix,
/sbin/mkswap rix,
/sbin/multipath rix,
/sbin/multipathd rix,
/sbin/e2label rix,
/sbin/tune2fs rix,
/{usr/,}sbin/blockdev rix,
/{usr/,}sbin/brctl rix,
/{usr/,}sbin/iscsiadm rix,
/{usr/,}sbin/ldconfig rix,
/{usr/,}sbin/ldconfig.real rix,
/{usr/,}sbin/mkfs rix,
/{usr/,}sbin/mkfs.fat rix,
/{usr/,}sbin/hdparm rix,
/{usr/,}sbin/xtables-multi rix,
/{usr/,}sbin/mkswap rix,
/{usr/,}sbin/multipath rix,
/{usr/,}sbin/multipathd rix,
/{usr/,}sbin/e2label rix,
/{usr/,}sbin/tune2fs rix,
/sys/block/ r,
/sys/class/fc_host/{,**} r,
/sys/class/iscsi_host/ r,