openstack/nova
Code Issues Proposed changes

Merge "Provide rootwrap filters for nova-api-metadata"

Browse Source
This commit is contained in:
Jenkins
2012-07-24 16:21:41 +00:00
committed by Gerrit Code Review
parent 4c9c0d74d4 6c888001f1
commit 013ab2fdfc
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
etc/nova/rootwrap.d/api-metadata.filters Normal file
View File

@@ -0,0 +1,17 @@
# nova-rootwrap command filters for api-metadata nodes
# This is needed on nova-api hosts running with "metadata" in enabled_apis
# or when running nova-api-metadata
# This file should be owned by (and only-writeable by) the root user
[Filters]
# nova/network/linux_net.py: 'ip[6]tables-save' % (cmd, '-t', ...
iptables-save: CommandFilter, /sbin/iptables-save, root
iptables-save_usr: CommandFilter, /usr/sbin/iptables-save, root
ip6tables-save: CommandFilter, /sbin/ip6tables-save, root
ip6tables-save_usr: CommandFilter, /usr/sbin/ip6tables-save, root
# nova/network/linux_net.py: 'ip[6]tables-restore' % (cmd,)
iptables-restore: CommandFilter, /sbin/iptables-restore, root
iptables-restore_usr: CommandFilter, /usr/sbin/iptables-restore, root
ip6tables-restore: CommandFilter, /sbin/ip6tables-restore, root
ip6tables-restore_usr: CommandFilter, /usr/sbin/ip6tables-restore, root