diff options
author | Richard Maw <richard.maw@codethink.co.uk> | 2015-03-23 21:06:52 +0000 |
---|---|---|
committer | Richard Maw <richard.maw@codethink.co.uk> | 2015-04-07 10:08:30 +0000 |
commit | d7a37662df5a89542c362bb708af3fd4c90ff02f (patch) | |
tree | 7e6f73a422ee168f3cc38392207af005c2c0c195 /openstack/etc/neutron/rootwrap.d/ipset-firewall.filters | |
parent | 55145f63356fbad216c250e3e64bd72b72b62b85 (diff) | |
download | definitions-d7a37662df5a89542c362bb708af3fd4c90ff02f.tar.gz |
WIP: Add OpenStack initial configuration
TODO: Split this out into:
1. initial config (openstack/etc) default values
2+. as many individual changes to initial config as possible to extract,
including support scripts and configuration extensions
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/ipset-firewall.filters')
-rw-r--r-- | openstack/etc/neutron/rootwrap.d/ipset-firewall.filters | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/ipset-firewall.filters b/openstack/etc/neutron/rootwrap.d/ipset-firewall.filters new file mode 100644 index 00000000..52c66373 --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/ipset-firewall.filters @@ -0,0 +1,12 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] +# neutron/agent/linux/iptables_firewall.py +# "ipset", "-A", ... +ipset: CommandFilter, ipset, root |