Browse Source

Drop invalid rootwrap filters

A recent change introduced a couple of rootwrap filters that are
supposed to allow running ping within a network namespace.

Those filters will actually replace the "ip" command with "ping",
which leads to an invalid command.

Since those two filters are now superfluous, we're going to drop
them.

Change-Id: I57869c68e858503ed8d6b86506c79c289f2820e1
Closes-Bug: #1864186
changes/00/709100/3
Lucian Petrut 2 years ago
parent
commit
caa34c2797
  1. 2
      etc/neutron/rootwrap.d/debug.filters

2
etc/neutron/rootwrap.d/debug.filters

@ -14,8 +14,6 @@
# (used by NeutronDebugAgent.ping_all)
ping: CommandFilter, ping, root
ping6: CommandFilter, ping6, root
ping_exec: IpNetnsExecFilter, ping, root
ping6_exec: IpNetnsExecFilter, ping6, root
# "sleep" command, only for testing
sleep: RegExpFilter, sleep, root, sleep, \d+

Loading…
Cancel
Save