summaryrefslogtreecommitdiff
path: root/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
diff options
context:
space:
mode:
authorRichard Maw <richard.maw@codethink.co.uk>2015-03-23 21:06:52 +0000
committerRichard Maw <richard.maw@codethink.co.uk>2015-03-23 22:57:47 +0000
commitee53974ddc864535bbc99302d16da11287affe47 (patch)
tree4cc8ed4c1b56401a7b5c4ced41ccca34ef8d4aad /openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
parent4a4e7610d52e9288b08fc04c0d704e354b76c61b (diff)
downloaddefinitions-ee53974ddc864535bbc99302d16da11287affe47.tar.gz
WIP: Add OpenStack initial configuration
TODO: Split this out into: 1. initial config (openstack/etc) default values 2+. as many individual changes to initial config as possible to extract, including support scripts and configuration extensions
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters')
-rw-r--r--openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters19
1 files changed, 19 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters b/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
new file mode 100644
index 00000000..03df3959
--- /dev/null
+++ b/openstack/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
@@ -0,0 +1,19 @@
+# neutron-rootwrap command filters for nodes on which neutron is
+# expected to control network
+#
+# This file should be owned by (and only-writeable by) the root user
+
+# format seems to be
+# cmd-name: filter-name, raw-command, user, args
+
+[Filters]
+
+# linuxbridge-agent
+# unclear whether both variants are necessary, but I'm transliterating
+# from the old mechanism
+brctl: CommandFilter, brctl, root
+bridge: CommandFilter, bridge, root
+
+# ip_lib
+ip: IpFilter, ip, root
+ip_exec: IpNetnsExecFilter, ip, root