openstack
/
neutron
Code Issues Proposed changes
OpenStack Networking (Neutron)
19,317 Commits 9 Branches 75 Tags 1,009 MiB
Python 99.5%
Shell 0.4%
Jinja 0.1%
Go to file
aojeagarcia e6c63513de Dropping radvd process privileges 
radvd needs to run as root, but has the capability to drop privileges on
linux hosts. Currently, radvd process is not using this feature and
this can be considered a serious risk.

In addition, some distributions like SUSE, radvd process runs as a non
privileged user by default, causing radvd failure to daemonize
because it can't write the pid in the corresponding neutron folder and
break the IPv6 functionality.

This patch allows radvd process to run with the same user used by
neutron. In order to allow this, it changes the radvd config file
permissions to 444 because radvd doesn't allow that this file can be
writeable by self/group. The readonly mode is not a problem updating the
file because of the way the neutron_lib replace_file function handles
the files operations.

Closes-Bug: #1777922

Change-Id: Ic5d976ba71a966a537d1f31888f82997a7ccb0de
Signed-off-by: aojeagarcia <aojeagarcia@suse.com>
(cherry picked from commit 9f2b40f2ce)
 		2018-06-26 11:20:42 -07:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack Add API test for port dns_domain 2017-08-22 17:10:37 +00:00
doc Use same instance of iptables_manager in L2 agent and extensions 2018-01-08 13:38:24 +01:00
etc Enable bridge command for openvswitch agent 2017-11-09 07:01:04 -05:00
neutron Dropping radvd process privileges 2018-06-26 11:20:42 -07:00
playbooks/legacy Merge "Removed neutron-tempest-full" into stable/pike 2018-01-25 21:15:33 +00:00
rally-jobs Switch rally job from q-* to neutron-* service names 2018-01-10 14:07:10 -08:00
releasenotes [OVS] Add mac-table-size to be set on each ovs bridge 2018-06-20 18:17:21 +00:00
tools Disable IPv6 forwarding by default on HA routers 2018-06-04 13:07:55 +00:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
.gitreview Update .gitreview for stable/pike 2017-08-11 08:59:13 +00:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Update pylint disable list to pass pylint 1.7.1 checks 2017-06-08 09:49:46 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
.testr.conf Allow more time for DB migration tests 2016-09-21 20:54:41 -04:00
.zuul.yaml Use rally 0.12.1 release for stable/pike branch. 2018-06-19 20:29:11 +00:00
CONTRIBUTING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
README.rst Optimize the link address 2017-04-07 09:55:12 +08:00
TESTING.rst docs: clarify wording about how to use advanced glance image 2017-08-01 08:56:45 -07:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
requirements.txt Updated from global requirements 2017-09-12 16:22:23 +00:00
run_tests.sh Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
setup.cfg Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
tox.ini Fix pep8 errors 2018-04-17 10:39:04 -04:00

README.rst

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst