From fa5967012d201a7bc3a407280fd7481f5dc81574 Mon Sep 17 00:00:00 2001 From: Lucian Petrut Date: Fri, 21 Feb 2020 13:21:20 +0200 Subject: [PATCH] Drop invalid rootwrap filters A recent change introduced a couple of rootwrap filters that are supposed to allow running ping within a network namespace. Those filters will actually replace the "ip" command with "ping", which leads to an invalid command. Since those two filters are now superfluous, we're going to drop them. Change-Id: I57869c68e858503ed8d6b86506c79c289f2820e1 Closes-Bug: #1864186 (cherry picked from commit caa34c279756164357bbcb9900aee36d0501d73f) --- etc/neutron/rootwrap.d/debug.filters | 2 -- 1 file changed, 2 deletions(-) diff --git a/etc/neutron/rootwrap.d/debug.filters b/etc/neutron/rootwrap.d/debug.filters index 828d563d68f..fc78f447dd7 100644 --- a/etc/neutron/rootwrap.d/debug.filters +++ b/etc/neutron/rootwrap.d/debug.filters @@ -14,8 +14,6 @@ # (used by NeutronDebugAgent.ping_all) ping: CommandFilter, ping, root ping6: CommandFilter, ping6, root -ping_exec: IpNetnsExecFilter, ping, root -ping6_exec: IpNetnsExecFilter, ping6, root # "sleep" command, only for testing sleep: RegExpFilter, sleep, root, sleep, \d+