When running commands that require root privileges, the linuxbridge, openvswitch, and ryu agent now prepend the commands with the value of the root_helper config variable. This is set to "sudo" in the plugins' .ini files, allowing the agent to run as a non-root user with appropriate sudo privilidges. If root_helper is changed to "sudo quantum-rootwrap", then the command being run will be filtered against lists of each agent's valid commands in quantum/rootwrap. See http://wiki.openstack.org/Packager/Rootwrap for details. Fixes bug 948467. Change-Id: I549515068a4ce8ae480905ec5eaab6257445d0c3 Signed-off-by: Bob Kukura <rkukura@redhat.com>
19 lines
595 B
INI
19 lines
595 B
INI
[DATABASE]
|
|
# This line MUST be changed to actually run the plugin.
|
|
# Example: sql_connection = mysql://root:nova@127.0.0.1:3306/ryu_quantum
|
|
#sql_connection = mysql://<user>:<pass>@<IP>:<port>/<dbname>
|
|
sql_connection = sqlite://
|
|
|
|
[OVS]
|
|
integration-bridge = br-int
|
|
|
|
# openflow-controller = <host IP address of ofp controller>:<port: 6633>
|
|
# openflow-rest-api = <host IP address of ofp rest api service>:<port: 8080>
|
|
openflow-controller = 127.0.0.1:6633
|
|
openflow-rest-api = 127.0.0.1:8080
|
|
|
|
[AGENT]
|
|
# Change to "sudo quantum-rootwrap" to limit commands that can be run
|
|
# as root.
|
|
root_helper = sudo
|