OpenStack Networking (Neutron)
Go to file
aojeagarcia 9f2b40f2ce Dropping radvd process privileges
radvd needs to run as root, but has the capability to drop privileges on
linux hosts. Currently, radvd process is not using this feature and
this can be considered a serious risk.

In addition, some distributions like SUSE, radvd process runs as a non
privileged user by default, causing radvd failure to daemonize
because it can't write the pid in the corresponding neutron folder and
break the IPv6 functionality.

This patch allows radvd process to run with the same user used by
neutron. In order to allow this, it changes the radvd config file
permissions to 444 because radvd doesn't allow that this file can be
writeable by self/group. The readonly mode is not a problem updating the
file because of the way the neutron_lib replace_file function handles
the files operations.

Closes-Bug: #1777922

Change-Id: Ic5d976ba71a966a537d1f31888f82997a7ccb0de
Signed-off-by: aojeagarcia <aojeagarcia@suse.com>
2018-06-21 15:35:51 +02:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack trivial: Fix file permissions 2018-05-10 10:07:39 +00:00
doc Merge "Update doc on stable release frequency" 2018-06-18 07:23:25 +00:00
etc Remove deprecated IVS interface driver 2018-04-26 20:15:46 +00:00
neutron Dropping radvd process privileges 2018-06-21 15:35:51 +02:00
playbooks/legacy Replace ovsfw tempest job with iptables-hybrid tempest job 2018-06-03 11:14:03 +02:00
rally-jobs [rally] Port custom plugins to use proper code 2018-05-18 00:25:35 +03:00
releasenotes [OVS] Add mac-table-size to be set on each ovs bridge 2018-06-08 16:26:35 +02:00
tools Merge "Switch to stestr" 2018-06-07 02:24:02 +00:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Switch to stestr 2018-06-02 13:03:33 +02:00
.gitreview Fix .gitreview to not point at a branch 2015-08-17 13:51:51 -06:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Update pylint disable list to pass pylint 1.7.1 checks 2017-06-08 09:49:46 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
.zuul.yaml Replace ovsfw tempest job with iptables-hybrid tempest job 2018-06-03 11:14:03 +02:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
CONTRIBUTING.rst Update link for contribution 2017-08-31 16:44:51 +02:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
lower-constraints.txt Switch to stestr 2018-06-02 13:03:33 +02:00
README.rst Correct tag link in README 2017-08-03 09:47:25 +08:00
requirements.txt bump neutron-lib version to 1.14.0 2018-05-04 06:48:36 -06:00
setup.cfg expose objects as entry points in setup.cfg 2018-05-24 09:49:03 -06:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Switch to stestr 2018-06-02 13:03:33 +02:00
TESTING.rst Fix bug to doc:testing 2018-06-08 11:22:41 +08:00
tox.ini fix tox python3 overrides 2018-06-13 15:02:25 -04:00

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst