openstack/oslo.rootwrap
Code Issues Proposed changes
OpenStack library for rootwrap
328 Commits 7 Branches 96 Tags 3.1 MiB
Python 100%
1b1b960d0d
Go to file
David Vallee Delisle 1b1b960d0d CommandFilter should allow exec from full path 
The current logic prevents from using a full path as argument.
We can't just compare basename to basename as it would allow passing
bogus paths. We need to make sure that passing a full path will compare
to the config's full path.

Closes-Bug: #1956606

Change-Id: I76094065de5b37f59a2500fbce7f500ada9915da
2022-01-13 08:45:09 -05:00
benchmark Remove six.PY3 2020-09-30 16:34:20 +08:00
doc Adding pre-commit 2020-09-03 14:20:33 +02:00
etc Always close all passed in fds beyond sensible_fd_limit on launch 2019-03-23 11:30:30 +01:00
oslo_rootwrap CommandFilter should allow exec from full path 2022-01-13 08:45:09 -05:00
releasenotes Merge "Adding pre-commit" 2020-09-22 12:38:40 +00:00
.gitignore ignore reno generated artifacts 2020-09-03 14:19:23 +02:00
.gitreview OpenDev Migration Patch 2019-04-19 19:40:43 +00:00
.pre-commit-config.yaml Move flake8 as a pre-commit local target. 2021-03-23 13:16:46 +01:00
.stestr.conf Switch to stestr 2018-07-03 16:00:44 +07:00
.zuul.yaml Dropping lower constraints testing 2020-12-18 15:12:00 +01:00
CONTRIBUTING.rst Align contributing doc with oslo's policy 2020-05-04 18:29:28 +02:00
LICENSE Add standalone project packaging support files 2013-11-21 16:25:23 +01:00
README.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-24 19:10:25 +08:00
requirements.txt Remove six 2020-10-09 09:19:18 +08:00
setup.cfg setup.cfg: Replace dashes with underscores 2021-05-05 10:01:58 +08:00
setup.py remove outdated header 2020-02-10 18:35:20 +01:00
test-requirements.txt Adding pre-commit 2020-09-03 14:20:33 +02:00
tox.ini Remove lower-constraints remnants 2021-02-19 14:49:39 +08:00

README.rst

Team and repository tags

image

oslo.rootwrap -- Escalated Permission Control

Latest Version

Downloads

oslo.rootwrap allows fine-grained filtering of shell commands to run as root from OpenStack services.