Cedric Brandily fbc2278414 Allow metadata proxy to log with nobody user/group ... Currently metadata proxy cannot run with nobody user/group as metadata proxy (as other services) uses WatchedFileHandler handler to log to file which does not support permissions drop (the process must be able to r/w after permissions drop to "watch" the file). This change allows to enable/disable log watch in metadata proxies with the new option metadata_proxy_log_watch. It should be disabled when metadata_proxy_user/group is not allowed to read/write metadata proxy log files. Option default value is deduced from metadata_proxy_user: * True if metadata_proxy_user is agent effective user id/name, * False otherwise. When log watch is disabled and logrotate is enabled on metadata proxy logging files, 'copytruncate' logrotate option must be used otherwise metadata proxy logs will be lost after the first log rotation. DocImpact Change-Id: I40a7bd82a2c60d9198312fdb52e3010c60db3511 Partial-Bug: #1427228		2015-04-01 22:41:07 +02:00
..
__init__.py	Empty files should not contain copyright or license	2014-10-20 00:50:32 +00:00
config.py	Allow metadata proxy to log with nobody user/group	2015-04-01 22:41:07 +02:00
ovs_lib.py	Moves ovs_lib to agent/common	2015-03-25 13:48:33 -07:00