caa34c2797
A recent change introduced a couple of rootwrap filters that are supposed to allow running ping within a network namespace. Those filters will actually replace the "ip" command with "ping", which leads to an invalid command. Since those two filters are now superfluous, we're going to drop them. Change-Id: I57869c68e858503ed8d6b86506c79c289f2820e1 Closes-Bug: #1864186
21 lines
618 B
XML
21 lines
618 B
XML
# neutron-rootwrap command filters for nodes on which neutron is
|
|
# expected to control network
|
|
#
|
|
# This file should be owned by (and only-writeable by) the root user
|
|
|
|
# format seems to be
|
|
# cmd-name: filter-name, raw-command, user, args
|
|
|
|
[Filters]
|
|
|
|
# This is needed because we should ping
|
|
# from inside a namespace which requires root
|
|
# _alt variants allow to match -c and -w in any order
|
|
# (used by NeutronDebugAgent.ping_all)
|
|
ping: CommandFilter, ping, root
|
|
ping6: CommandFilter, ping6, root
|
|
|
|
# "sleep" command, only for testing
|
|
sleep: RegExpFilter, sleep, root, sleep, \d+
|
|
kill_sleep: KillFilter, root, sleep, -9
|