diff --git a/files/rootwrap.d/volume.filters b/files/rootwrap.d/volume.filters index 49ee72d6..0451e652 100644 --- a/files/rootwrap.d/volume.filters +++ b/files/rootwrap.d/volume.filters @@ -20,7 +20,7 @@ lvdisplay: EnvFilter, env, root, LC_ALL=C, lvdisplay pvs2: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, pvs vgs2: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, vgs lvs2: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvs -lvs2: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay +lvdisplay2: EnvFilter, env, root, LC_ALL=C, LVM_SUPPRESS_FD_WARNINGS=, lvdisplay # -LVM related show commands conf var @@ -226,3 +226,4 @@ drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio # cinder/volume/drivers/quobyte.py getfattr: CommandFilter, getfattr, root mount.quobyte: CommandFilter, getfattr, root + diff --git a/templates/policy.json.j2 b/templates/policy.json.j2 index c38bfaba..6a651220 100644 --- a/templates/policy.json.j2 +++ b/templates/policy.json.j2 @@ -79,9 +79,6 @@ "volume:get_transfer": "rule:admin_or_owner", "volume:get_all_transfers": "rule:admin_or_owner", - "volume_extension:replication:promote": "rule:admin_api", - "volume_extension:replication:reenable": "rule:admin_api", - "volume:failover_host": "rule:admin_api", "volume:freeze_host": "rule:admin_api", "volume:thaw_host": "rule:admin_api",