summaryrefslogtreecommitdiff
path: root/openstack/etc/neutron/rootwrap.d/debug.filters
diff options
context:
space:
mode:
authorFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-02-12 17:26:00 +0000
committerFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-03-02 17:45:43 +0000
commita706e6c5dbedef054338bbf5026fbbd363812694 (patch)
treea9bfc16faed263b7dbf64e0e421c65bb86c69e1b /openstack/etc/neutron/rootwrap.d/debug.filters
parent30880f78a2f141d0775217af4ca334b329f7de40 (diff)
downloaddefinitions-a706e6c5dbedef054338bbf5026fbbd363812694.tar.gz
SPLITME: Add all Openstack
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/debug.filters')
-rw-r--r--openstack/etc/neutron/rootwrap.d/debug.filters14
1 files changed, 14 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/debug.filters b/openstack/etc/neutron/rootwrap.d/debug.filters
new file mode 100644
index 00000000..b61d9601
--- /dev/null
+++ b/openstack/etc/neutron/rootwrap.d/debug.filters
@@ -0,0 +1,14 @@
+# neutron-rootwrap command filters for nodes on which neutron is
+# expected to control network
+#
+# This file should be owned by (and only-writeable by) the root user
+
+# format seems to be
+# cmd-name: filter-name, raw-command, user, args
+
+[Filters]
+
+# This is needed because we should ping
+# from inside a namespace which requires root
+ping: RegExpFilter, ping, root, ping, -w, \d+, -c, \d+, [0-9\.]+
+ping6: RegExpFilter, ping6, root, ping6, -w, \d+, -c, \d+, [0-9A-Fa-f:]+