openstack/openstack-ansible-os_nova
Code Issues Proposed changes

Update paste, policy and rootwrap configurations 2016-07-14

Browse Source 
Change-Id: If49ea9ce30e081af2d6d662361a7d35d3ab5a60b
This commit is contained in:
Jesse Pretorius 2016-07-14 18:51:03 +01:00 committed by Jesse Pretorius (odyssey4me)
parent 2bdff13b29
commit 4596234e58
2 changed files with 1 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/rootwrap.d/compute.filters
View File

@ -224,7 +224,7 @@ sg_scan: CommandFilter, sg_scan, root
# nova/volume/encryptors/cryptsetup.py: # nova/volume/encryptors/cryptsetup.py:
# nova/volume/encryptors/luks.py: # nova/volume/encryptors/luks.py:
ln: RegExpFilter, ln, root, ln, --symbolic, --force, /dev/mapper/.*, .* ln: RegExpFilter, ln, root, ln, --symbolic, --force, /dev/mapper/crypt-.+, .+
# nova/volume/encryptors.py: # nova/volume/encryptors.py:
# nova/virt/libvirt/dmcrypt.py: # nova/virt/libvirt/dmcrypt.py:

9
templates/policy.json.j2
View File

@ -1,11 +1,2 @@
{ {
"context_is_admin": "role:admin",
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"default": "rule:admin_or_owner",
"cells_scheduler_filter:TargetCellFilter": "is_admin:True",
"admin_api": "is_admin:True",
"network:attach_external_network": "is_admin:True"
} }