neutron/etc/neutron/rootwrap.d
Rodolfo Alonso Hernandez 055484a3ab "ping"/"ping6" command support in rootwrap filters
To have correct support in rootwrap, "ping"/"ping6" command should
have the correct filters in rootwrap.

Because "ping" command is harmless, "CommandFilter" is used to allow
any binary call, regardless of the parameters used and the order.

Nevertheless, this patch also proposes to use "ping"/"ping6" with
the same parameters and a specific order, to help in the debug
process:
- ping[6] -W <timeout> <address>
- ping[6] -W <timeout> -c <count> <address>
- ping[6] -W <timeout> -c <count> -i <interval> <address>

Those commands could be called from inside a namespace. The needed
filter is also added in this patch.

Conflicts:
    etc/neutron/rootwrap.d/debug.filters
    neutron/tests/common/net_helpers.py

Change-Id: Ie5cbc0dcc76672b26cd2605f08cfd17a30b4c905
Closes-Bug: #1863006
(cherry picked from commit cc3b9df426)
2020-11-10 07:56:43 +00:00
..
debug.filters "ping"/"ping6" command support in rootwrap filters 2020-11-10 07:56:43 +00:00
dhcp.filters Remove deprecated IVS interface driver 2018-04-26 20:15:46 +00:00
dibbler.filters Add PD support in HA router 2017-03-15 04:31:09 +00:00
ebtables.filters Remove ebtables_driver/manager dead code 2015-09-08 15:24:28 +00:00
ipset-firewall.filters Adds ipset support for Security Groups 2014-09-12 10:18:51 +08:00
iptables-firewall.filters iptables: stop 'fixing' kernel sysctl bridge firewalling knobs 2017-02-27 15:14:14 +00:00
l3.filters Allow to kill keepalived state change monitor process 2020-01-28 16:46:07 +01:00
linuxbridge-plugin.filters linuxbridge-agent: add missing sysctl rootwrap entry 2017-09-05 18:59:30 +02:00
netns-cleanup.filters Kill processes when cleaning up namespaces 2016-12-20 10:52:41 +00:00
openvswitch-plugin.filters Fix typo "extention" -> "extension" 2017-11-09 07:05:56 -05:00
privsep.filters Remove Duplicate line in privsep.filters 2016-12-23 10:59:57 -05:00