f9a750fcaf
This commit aligns privsep filters with other projects e.g nova[1], cinder[2] to prevent a malicious user from invoking privsep-helper with an arbitrary configuration file in case it took control over an unprivileged neutron process. [1]4f261f98e1/etc/nova/rootwrap.d/compute.filters (L23)[2]f5feb87ab8/etc/cinder/rootwrap.d/volume.filters (L41)Change-Id: I0b4e8cdee0cbbc46547599e176efb4420ee1b318
To generate the sample neutron configuration files, run the following command from the top level of the neutron directory: tox -e genconfig If a 'tox' environment is unavailable, then you can run the following script instead to generate the configuration files: ./tools/generate_config_file_samples.sh