From 2273499155a8cd83150aa4b4f8ba08ecbbdc9306 Mon Sep 17 00:00:00 2001 From: Slawek Kaplonski Date: Thu, 16 Apr 2020 12:25:54 +0200 Subject: [PATCH] Add rootwrap filter rule for radvd-kill script In patch [1] support for custom kill scripts was added. We also added rootwrap filter rules for such scripts to kill dnsmasq, haproxy, dibbler and keepalived processes. But we missed to add rule for radvd-kill so this patch adds it (better late than never ;)) [1] https://review.opendev.org/#/c/661760/ Closes-Bug: #1873240 Change-Id: I8fa7176d1d9667c6b5cc95af0e31210d0f1c3662 --- etc/neutron/rootwrap.d/l3.filters | 1 + 1 file changed, 1 insertion(+) diff --git a/etc/neutron/rootwrap.d/l3.filters b/etc/neutron/rootwrap.d/l3.filters index c11fd1441b8..d66fa2cff9a 100644 --- a/etc/neutron/rootwrap.d/l3.filters +++ b/etc/neutron/rootwrap.d/l3.filters @@ -24,6 +24,7 @@ kill_haproxy_script: CommandFilter, haproxy-kill, root kill_radvd_usr: KillFilter, root, /usr/sbin/radvd, -15, -9, -HUP kill_radvd: KillFilter, root, /sbin/radvd, -15, -9, -HUP +kill_radvd_script: CommandFilter, radvd-kill, root # ip_lib ip: IpFilter, ip, root