diff options
| author | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-02-12 17:26:00 +0000 |
|---|---|---|
| committer | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-03-02 17:45:43 +0000 |
| commit | a706e6c5dbedef054338bbf5026fbbd363812694 (patch) | |
| tree | a9bfc16faed263b7dbf64e0e421c65bb86c69e1b /openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters | |
| parent | 30880f78a2f141d0775217af4ca334b329f7de40 (diff) | |
| download | definitions-a706e6c5dbedef054338bbf5026fbbd363812694.tar.gz | |
SPLITME: Add all Openstack
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters')
| -rw-r--r-- | openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters b/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters new file mode 100644 index 00000000..03df3959 --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters @@ -0,0 +1,19 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +# linuxbridge-agent +# unclear whether both variants are necessary, but I'm transliterating +# from the old mechanism +brctl: CommandFilter, brctl, root +bridge: CommandFilter, bridge, root + +# ip_lib +ip: IpFilter, ip, root +ip_exec: IpNetnsExecFilter, ip, root |