04283565ec
Make the rootwrap filters more portable by removing the explicit exec_dirs prefix from them. This allows a binary to be installed in any of the exec_dirs and still be used by rootwrap, which improves cross-distro portability. Change-Id: Ieccb8c480e0e116a976d0920ab900305a5615015
10 lines
359 B
XML
10 lines
359 B
XML
# nova-rootwrap command filters for compute nodes
|
|
# This file should be owned by (and only-writeable by) the root user
|
|
|
|
[Filters]
|
|
# nova/virt/baremetal/ipmi.py: 'ipmitool', ..
|
|
ipmitool: CommandFilter, ipmitool, root
|
|
|
|
# nova/virt/baremetal/ipmi.py: 'kill', '-TERM', str(console_pid)
|
|
kill_shellinaboxd: KillFilter, root, /usr/local/bin/shellinaboxd, -15, -TERM
|