diff options
author | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-02-12 17:26:00 +0000 |
---|---|---|
committer | Francisco Redondo Marchena <francisco.marchena@codethink.co.uk> | 2015-02-20 09:00:38 +0000 |
commit | 277c9daa3cae1f7d33e62186e72093123be2d9c6 (patch) | |
tree | 899c9606f9d701038f5c679cdd994f25178472f0 /openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters | |
parent | 24ab2703acbb6cf6e85fdf4d433d7e28d3db0182 (diff) | |
download | definitions-277c9daa3cae1f7d33e62186e72093123be2d9c6.tar.gz |
SPLITME: Add all Openstack
Diffstat (limited to 'openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters')
-rw-r--r-- | openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters b/openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters new file mode 100644 index 00000000..b63a83b9 --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/openvswitch-plugin.filters @@ -0,0 +1,22 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +# openvswitch-agent +# unclear whether both variants are necessary, but I'm transliterating +# from the old mechanism +ovs-vsctl: CommandFilter, ovs-vsctl, root +ovs-ofctl: CommandFilter, ovs-ofctl, root +kill_ovsdb_client: KillFilter, root, /usr/bin/ovsdb-client, -9 +ovsdb-client: CommandFilter, ovsdb-client, root +xe: CommandFilter, xe, root + +# ip_lib +ip: IpFilter, ip, root +ip_exec: IpNetnsExecFilter, ip, root |