diff options
| author | Richard Maw <richard.maw@codethink.co.uk> | 2015-03-23 21:06:52 +0000 |
|---|---|---|
| committer | Richard Maw <richard.maw@codethink.co.uk> | 2015-03-23 22:57:47 +0000 |
| commit | ee53974ddc864535bbc99302d16da11287affe47 (patch) | |
| tree | 4cc8ed4c1b56401a7b5c4ced41ccca34ef8d4aad /openstack/etc/neutron/rootwrap.d/iptables-firewall.filters | |
| parent | 4a4e7610d52e9288b08fc04c0d704e354b76c61b (diff) | |
| download | definitions-ee53974ddc864535bbc99302d16da11287affe47.tar.gz | |
WIP: Add OpenStack initial configuration
TODO: Split this out into:
1. initial config (openstack/etc) default values
2+. as many individual changes to initial config as possible to extract,
including support scripts and configuration extensions
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/iptables-firewall.filters')
| -rw-r--r-- | openstack/etc/neutron/rootwrap.d/iptables-firewall.filters | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/iptables-firewall.filters b/openstack/etc/neutron/rootwrap.d/iptables-firewall.filters new file mode 100644 index 00000000..b8a6ab5b --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/iptables-firewall.filters @@ -0,0 +1,21 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +# neutron/agent/linux/iptables_manager.py +# "iptables-save", ... +iptables-save: CommandFilter, iptables-save, root +iptables-restore: CommandFilter, iptables-restore, root +ip6tables-save: CommandFilter, ip6tables-save, root +ip6tables-restore: CommandFilter, ip6tables-restore, root + +# neutron/agent/linux/iptables_manager.py +# "iptables", "-A", ... +iptables: CommandFilter, iptables, root +ip6tables: CommandFilter, ip6tables, root |