diff options
author | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-02-12 17:26:00 +0000 |
---|---|---|
committer | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-02-12 17:26:00 +0000 |
commit | 88c8c3fc93c6b7c3b2f5e54dd19d5a84ae126626 (patch) | |
tree | 97076d768900b0f1f0361efd899ac75cf0937c6c /openstack/etc/neutron/rootwrap.d/dhcp.filters | |
parent | 1319309d3ff4eb85cb0e7e6cb178cb56ff116524 (diff) | |
download | definitions-88c8c3fc93c6b7c3b2f5e54dd19d5a84ae126626.tar.gz |
SPLITME: Add all Openstackbaserock/franred/only-openstack-packages
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/dhcp.filters')
-rw-r--r-- | openstack/etc/neutron/rootwrap.d/dhcp.filters | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/dhcp.filters b/openstack/etc/neutron/rootwrap.d/dhcp.filters new file mode 100644 index 00000000..0712ec13 --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/dhcp.filters @@ -0,0 +1,35 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +# dhcp-agent +dnsmasq: EnvFilter, dnsmasq, root, NEUTRON_NETWORK_ID= +# dhcp-agent uses kill as well, that's handled by the generic KillFilter +# it looks like these are the only signals needed, per +# neutron/agent/linux/dhcp.py +kill_dnsmasq: KillFilter, root, /sbin/dnsmasq, -9, -HUP +kill_dnsmasq_usr: KillFilter, root, /usr/sbin/dnsmasq, -9, -HUP + +ovs-vsctl: CommandFilter, ovs-vsctl, root +ivs-ctl: CommandFilter, ivs-ctl, root +mm-ctl: CommandFilter, mm-ctl, root +dhcp_release: CommandFilter, dhcp_release, root + +# metadata proxy +metadata_proxy: CommandFilter, neutron-ns-metadata-proxy, root +# If installed from source (say, by devstack), the prefix will be +# /usr/local instead of /usr/bin. +metadata_proxy_local: CommandFilter, /usr/local/bin/neutron-ns-metadata-proxy, root +# RHEL invocation of the metadata proxy will report /usr/bin/python +kill_metadata: KillFilter, root, python, -9 +kill_metadata7: KillFilter, root, python2.7, -9 + +# ip_lib +ip: IpFilter, ip, root +ip_exec: IpNetnsExecFilter, ip, root |