From 7d62308eaa9fb4a80683499ea40f6d0c97fa7a4d Mon Sep 17 00:00:00 2001 From: Rodolfo Alonso Hernandez Date: Mon, 1 Jul 2019 10:27:06 +0000 Subject: [PATCH] Remove rootwrap filters for TC commands in Linux Bridge All neutron.agent.linux.tc_lib TC commands, used in Linux Bridge agent, have been implemented using Pyroute2. Change-Id: Idcac297b204900037b22ab25a516a161f4e78224 Related-Bug: #1560963 --- etc/neutron/rootwrap.d/linuxbridge-plugin.filters | 8 -------- 1 file changed, 8 deletions(-) diff --git a/etc/neutron/rootwrap.d/linuxbridge-plugin.filters b/etc/neutron/rootwrap.d/linuxbridge-plugin.filters index 298b8077559..5c63b896e5a 100644 --- a/etc/neutron/rootwrap.d/linuxbridge-plugin.filters +++ b/etc/neutron/rootwrap.d/linuxbridge-plugin.filters @@ -19,11 +19,3 @@ sysctl: CommandFilter, sysctl, root ip: IpFilter, ip, root find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.* ip_exec: IpNetnsExecFilter, ip, root - -# tc commands needed for QoS support -tc_replace_tbf: RegExpFilter, tc, root, tc, qdisc, replace, dev, .+, root, tbf, rate, .+, latency, .+, burst, .+ -tc_add_ingress: RegExpFilter, tc, root, tc, qdisc, add, dev, .+, ingress, handle, .+ -tc_delete: RegExpFilter, tc, root, tc, qdisc, del, dev, .+, .+ -tc_show_qdisc: RegExpFilter, tc, root, tc, qdisc, show, dev, .+ -tc_show_filters: RegExpFilter, tc, root, tc, filter, show, dev, .+, parent, .+ -tc_add_filter: RegExpFilter, tc, root, tc, filter, add, dev, .+, parent, .+, protocol, all, prio, .+, basic, police, rate, .+, burst, .+, mtu, .+, drop