OpenStack library for privilege separation
Go to file
Ben Nemec c913b972b7 Expose privsep options for config-generator
We were missing the oslo-config-generator entrypoint in this library,
which meant there was no way to include the privsep opts in a
service's sample config file.

One complication is that it is possible to override the group name
for the opts. I assume this was done to allow services to run
multiple privsep daemons with different levels of permission, but
it means that the service will have to document any additional or
different group names that it may use.

Change-Id: I1ef30cb14d365f4bbfa580e75afc3580910d6fcf
2019-01-10 19:56:24 +00:00
doc/source Added example blogposts 2018-06-06 07:15:13 +02:00
oslo_privsep Expose privsep options for config-generator 2019-01-10 19:56:24 +00:00
releasenotes Use threads to process target function 2018-11-02 09:28:34 -05:00
.coveragerc Initial cookiecutter project 2015-10-23 18:51:29 +11:00
.gitignore Clean up .gitignore references to personal tools 2018-10-15 11:51:03 +08:00
.gitreview Added .gitreview 2015-10-21 05:24:45 +00:00
.mailmap Initial cookiecutter project 2015-10-23 18:51:29 +11:00
.stestr.conf Switch to stestr 2018-07-03 16:09:28 +07:00
.zuul.yaml Use template for lower-constraints 2018-12-20 20:14:31 +01:00
CONTRIBUTING.rst Initial cookiecutter project 2015-10-23 18:51:29 +11:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:09:35 +08:00
LICENSE Initial cookiecutter project 2015-10-23 18:51:29 +11:00
README.rst Remove PyPI downloads 2018-08-07 05:56:11 +00:00
babel.cfg Initial cookiecutter project 2015-10-23 18:51:29 +11:00
lower-constraints.txt Add futures as a requirement for Python 2 2018-12-17 08:58:31 +01:00
requirements.txt Add futures as a requirement for Python 2 2018-12-17 08:58:31 +01:00
setup.cfg Expose privsep options for config-generator 2019-01-10 19:56:24 +00:00
setup.py Updated from global requirements 2017-03-03 00:03:13 +00:00
test-requirements.txt Switch to stestr 2018-07-03 16:09:28 +07:00
tox.ini Don't quote {posargs} in tox.ini 2018-10-09 13:36:18 +00:00

README.rst

Team and repository tags

image

oslo.privsep

Latest Version

OpenStack library for privilege separation

This library helps applications perform actions which require more or less privileges than they were started with in a safe, easy to code and easy to use manner. For more information on why this is generally a good idea please read over the principle of least privilege and the specification which created this library.