openstack
/
neutron
Code Issues Proposed changes
OpenStack Networking (Neutron)
20,020 Commits 9 Branches 75 Tags 996 MiB
Python 99.5%
Shell 0.4%
Jinja 0.1%
Go to file
aojeagarcia 11e604a550 Dropping radvd process privileges 
radvd needs to run as root, but has the capability to drop privileges on
linux hosts. Currently, radvd process is not using this feature and
this can be considered a serious risk.

In addition, some distributions like SUSE, radvd process runs as a non
privileged user by default, causing radvd failure to daemonize
because it can't write the pid in the corresponding neutron folder and
break the IPv6 functionality.

This patch allows radvd process to run with the same user used by
neutron. In order to allow this, it changes the radvd config file
permissions to 444 because radvd doesn't allow that this file can be
writeable by self/group. The readonly mode is not a problem updating the
file because of the way the neutron_lib replace_file function handles
the files operations.

Closes-Bug: #1777922

Change-Id: Ic5d976ba71a966a537d1f31888f82997a7ccb0de
Signed-off-by: aojeagarcia <aojeagarcia@suse.com>
(cherry picked from commit 9f2b40f2ce)
 		2018-06-26 17:48:10 +00:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack Try to enable L3 agent extension `fip_qos` 2018-03-22 17:16:18 +00:00
doc Fix wrong release names in docs 2018-05-20 10:16:19 +02:00
etc Allow port create/update by shared nw owners 2017-12-12 04:12:54 +00:00
neutron Dropping radvd process privileges 2018-06-26 17:48:10 +00:00
playbooks/legacy Merge "Switch rally job from q-* to neutron-* service names" 2018-01-12 09:43:10 +00:00
rally-jobs Switch rally job from q-* to neutron-* service names 2018-01-09 12:12:48 -08:00
releasenotes [OVS] Add mac-table-size to be set on each ovs bridge 2018-06-19 07:12:45 +00:00
tools Disable IPv6 forwarding by default on HA routers 2018-06-03 19:10:40 +00:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Added zuulv3 jobs for testing neutron tempest plugin 2017-11-13 09:30:36 +05:30
.gitreview Update .gitreview for stable/queens 2018-02-09 16:36:24 +00:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Update pylint disable list to pass pylint 1.7.1 checks 2017-06-08 09:49:46 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
.testr.conf Allow more time for DB migration tests 2016-09-21 20:54:41 -04:00
.zuul.yaml Use neutron-tempest-plugin-jobs-queens job template 2018-06-15 22:28:01 +02:00
CONTRIBUTING.rst Update link for contribution 2017-08-31 16:44:51 +02:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
README.rst Correct tag link in README 2017-08-03 09:47:25 +08:00
TESTING.rst Compile ovs for ovsfw to avoid ovs-vswitchd core dumps 2018-02-13 14:59:58 +00:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
requirements.txt Updated from global requirements 2018-02-01 07:17:59 +00:00
setup.cfg [log] ovs fw logging implementation 2018-01-09 09:26:40 +07:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Updated from global requirements 2018-02-01 07:17:59 +00:00
tox.ini Fix pep8 errors 2018-04-12 01:31:55 +09:00

README.rst

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst