From b3582e1ae3627bc0a8b35238dddc90647a5f9d89 Mon Sep 17 00:00:00 2001 From: Lucian Petrut Date: Fri, 21 Feb 2020 13:21:20 +0200 Subject: [PATCH] Drop invalid rootwrap filters A recent change introduced a couple of rootwrap filters that are supposed to allow running ping within a network namespace. Those filters will actually replace the "ip" command with "ping", which leads to an invalid command. Since those two filters are now superfluous, we're going to drop them. Change-Id: I57869c68e858503ed8d6b86506c79c289f2820e1 Closes-Bug: #1864186 (cherry picked from commit caa34c279756164357bbcb9900aee36d0501d73f) --- etc/neutron/rootwrap.d/debug.filters | 2 -- 1 file changed, 2 deletions(-) diff --git a/etc/neutron/rootwrap.d/debug.filters b/etc/neutron/rootwrap.d/debug.filters index 828d563d68f..fc78f447dd7 100644 --- a/etc/neutron/rootwrap.d/debug.filters +++ b/etc/neutron/rootwrap.d/debug.filters @@ -14,8 +14,6 @@ # (used by NeutronDebugAgent.ping_all) ping: CommandFilter, ping, root ping6: CommandFilter, ping6, root -ping_exec: IpNetnsExecFilter, ping, root -ping6_exec: IpNetnsExecFilter, ping6, root # "sleep" command, only for testing sleep: RegExpFilter, sleep, root, sleep, \d+