openstack/neutron
Code Issues Proposed changes

Merge "Remove "find" rule from rootwrap filters"

Browse Source
This commit is contained in:
Zuul 2020-12-06 14:37:14 +00:00 committed by Gerrit Code Review
commit 0ff17b1605
3 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/neutron/rootwrap.d/l3.filters
View File

@ -28,7 +28,6 @@ kill_radvd_script: CommandFilter, radvd-kill, root
# ip_lib
ip: IpFilter, ip, root
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
ip_exec: IpNetnsExecFilter, ip, root
# l3_tc_lib

1
etc/neutron/rootwrap.d/linuxbridge-plugin.filters
View File

@ -17,5 +17,4 @@ sysctl: CommandFilter, sysctl, root
# ip_lib
ip: IpFilter, ip, root
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
ip_exec: IpNetnsExecFilter, ip, root

1
etc/neutron/rootwrap.d/openvswitch-plugin.filters
View File

@ -16,7 +16,6 @@ ovsdb-client: CommandFilter, ovsdb-client, root
# ip_lib
ip: IpFilter, ip, root
find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.*
ip_exec: IpNetnsExecFilter, ip, root
# needed for FDB extension