openstack
/
neutron
Code Issues Proposed changes

Add rootwrap filter rule for radvd-kill script 

In patch [1] support for custom kill scripts was added.
We also added rootwrap filter rules for such scripts to
kill dnsmasq, haproxy, dibbler and keepalived processes.
But we missed to add rule for radvd-kill so this patch
adds it (better late than never ;))

[1] https://review.opendev.org/#/c/661760/

Closes-Bug: #1873240

Change-Id: I8fa7176d1d9667c6b5cc95af0e31210d0f1c3662
This commit is contained in:
Slawek Kaplonski 2020-04-16 12:25:54 +02:00
parent 8d85b35629
commit 2273499155
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/neutron/rootwrap.d/l3.filters
View File

@ -24,6 +24,7 @@ kill_haproxy_script: CommandFilter, haproxy-kill, root
kill_radvd_usr: KillFilter, root, /usr/sbin/radvd, -15, -9, -HUP
kill_radvd: KillFilter, root, /sbin/radvd, -15, -9, -HUP
kill_radvd_script: CommandFilter, radvd-kill, root
# ip_lib
ip: IpFilter, ip, root