openstack
/
oslo.rootwrap
Code Issues Proposed changes
OpenStack library for rootwrap
249 Commits 5 Branches 93 Tags 3 MiB
Python 100%
Go to file
Dirk Mueller fdb32096ab Run rootwrap with lower fd ulimit by default 
On Python 2.x, a subprocess.Popen() with close_fds=True will
fork and then close filedescriptors range(3..os.sysconf("SC_OPEN_MAX")),
which thanks to Kernel PTI (Kaiser patches) is significantly slower
in 2018 when the range is very large. With a soft limit of 1048576,
benchmark.py reports an overhead of ~ 400ms without this patch and 2ms
with the patch applied. This patch adds a configuration option and
leaves it disabled for the stable/* backports to not change default
behavior.

Also includes Ben Nemec's release note entry, adjusted for the stable
backport. This is Ib29e96307caa39c21936f216d9aed7907e7a7331 for master.

Also includes I2391315f77718a3c9eb9fc8c03a6882237f33548 from master.

Also includes I3b481ddd14ae2b948270d715aad157cf3996def7 from master.

(cherry picked from commit c0a8699820)
(cherry picked from commit 8f148f5e9e)
(cherry picked from commit 5259c08c09)

Closes-Bug: 1796267
Closes-Bug: #1804639
Change-Id: Idd98c183eca3e2df8648fc0f37d27fe9cc6d0563
 		2019-09-16 11:54:18 +02:00
benchmark Update to support running benchmark on python3 2018-04-04 11:40:23 -04:00
doc Run rootwrap with lower fd ulimit by default 2019-09-16 11:54:18 +02:00
etc Run rootwrap with lower fd ulimit by default 2019-09-16 11:54:18 +02:00
oslo_rootwrap Run rootwrap with lower fd ulimit by default 2019-09-16 11:54:18 +02:00
releasenotes Run rootwrap with lower fd ulimit by default 2019-09-16 11:54:18 +02:00
.gitignore Add reno for release notes management 2016-06-30 09:59:31 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:40:44 +00:00
.testr.conf Add standalone project packaging support files 2013-11-21 16:25:23 +01:00
.zuul.yaml import zuul job settings from project-config 2018-08-03 18:02:40 -04:00
CONTRIBUTING.rst Workflow documentation is now in infra-manual 2014-12-05 03:30:39 +00:00
LICENSE Add standalone project packaging support files 2013-11-21 16:25:23 +01:00
README.rst Trivial: Update pypi url to new url 2018-04-21 10:49:07 +08:00
lower-constraints.txt fix lower constraints and uncap eventlet 2018-04-12 10:48:11 -04:00
requirements.txt Updated from global requirements 2017-11-16 11:21:52 +00:00
setup.cfg Treat doc warnings as errors 2018-01-08 11:47:18 -06:00
setup.py Updated from global requirements 2017-03-03 00:03:18 +00:00
test-requirements.txt fix lower constraints and uncap eventlet 2018-04-12 10:48:11 -04:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/rocky 2018-07-26 12:39:50 +00:00

README.rst

Team and repository tags

image

oslo.rootwrap -- Escalated Permission Control

Latest Version

Downloads

oslo.rootwrap allows fine-grained filtering of shell commands to run as root from OpenStack services.