3c87de7c12
Alternative to using a sudoers file to limit which commands can be run as root in Nova. This one makes use of command filters defined in Nova code itself, which can be customized to deeply inspect command arguments before allowing a command to be executed. This change puts the infrastructure in place, together with command filters that replicate the level of filtering provided by a sudoers file (no deep argument inspection yet). An example of an advanced filter (RegExpFilter) is also provided. This new root wrapper is not active by default (root_helper still defaults to "sudo"). Implements blueprint nova-rootwrap. Change-Id: I7ad723b55e9446758876f21b4fbb09374a910425
115 lines
3.6 KiB
Python
115 lines
3.6 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2010 United States Government as represented by the
|
|
# Administrator of the National Aeronautics and Space Administration.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import gettext
|
|
import glob
|
|
import os
|
|
import subprocess
|
|
import sys
|
|
|
|
from setuptools import find_packages
|
|
from setuptools.command.sdist import sdist
|
|
|
|
# In order to run the i18n commands for compiling and
|
|
# installing message catalogs, we use DistUtilsExtra.
|
|
# Don't make this a hard requirement, but warn that
|
|
# i18n commands won't be available if DistUtilsExtra is
|
|
# not installed...
|
|
try:
|
|
from DistUtilsExtra.auto import setup
|
|
except ImportError:
|
|
from setuptools import setup
|
|
print "Warning: DistUtilsExtra required to use i18n builders. "
|
|
print "To build nova with support for message catalogs, you need "
|
|
print " https://launchpad.net/python-distutils-extra >= 2.18"
|
|
|
|
gettext.install('nova', unicode=1)
|
|
|
|
from nova import version
|
|
|
|
nova_cmdclass = {}
|
|
|
|
try:
|
|
from sphinx.setup_command import BuildDoc
|
|
|
|
class local_BuildDoc(BuildDoc):
|
|
def run(self):
|
|
for builder in ['html', 'man']:
|
|
self.builder = builder
|
|
self.finalize_options()
|
|
BuildDoc.run(self)
|
|
nova_cmdclass['build_sphinx'] = local_BuildDoc
|
|
|
|
except:
|
|
pass
|
|
|
|
|
|
def find_data_files(destdir, srcdir):
|
|
package_data = []
|
|
files = []
|
|
for d in glob.glob('%s/*' % (srcdir, )):
|
|
if os.path.isdir(d):
|
|
package_data += find_data_files(
|
|
os.path.join(destdir, os.path.basename(d)), d)
|
|
else:
|
|
files += [d]
|
|
package_data += [(destdir, files)]
|
|
return package_data
|
|
|
|
|
|
def load_required_packages():
|
|
with file('tools/pip-requires', 'r') as f:
|
|
return [line.strip() for line in f]
|
|
|
|
|
|
required_packages = load_required_packages()
|
|
|
|
setup(name='nova',
|
|
version=version.canonical_version_string(),
|
|
description='cloud computing fabric controller',
|
|
author='OpenStack',
|
|
author_email='nova@lists.launchpad.net',
|
|
url='http://www.openstack.org/',
|
|
cmdclass=nova_cmdclass,
|
|
packages=find_packages(exclude=['bin', 'smoketests']),
|
|
include_package_data=True,
|
|
test_suite='nose.collector',
|
|
data_files=find_data_files('share/nova', 'tools'),
|
|
install_requires=required_packages,
|
|
scripts=['bin/nova-ajax-console-proxy',
|
|
'bin/nova-api',
|
|
'bin/nova-api-ec2',
|
|
'bin/nova-api-metadata',
|
|
'bin/nova-api-os',
|
|
'bin/nova-compute',
|
|
'bin/nova-console',
|
|
'bin/nova-dhcpbridge',
|
|
'bin/nova-direct-api',
|
|
'bin/nova-logspool',
|
|
'bin/nova-manage',
|
|
'bin/nova-network',
|
|
'bin/nova-objectstore',
|
|
'bin/nova-rootwrap',
|
|
'bin/nova-scheduler',
|
|
'bin/nova-spoolsentry',
|
|
'bin/stack',
|
|
'bin/nova-volume',
|
|
'bin/nova-vncproxy',
|
|
'tools/nova-debug'],
|
|
py_modules=[])
|