summaryrefslogtreecommitdiff
path: root/openstack/etc/nova/rootwrap.conf
diff options
context:
space:
mode:
authorRichard Maw <richard.maw@codethink.co.uk>2015-03-23 21:06:52 +0000
committerPedro Alvarez <pedro.alvarez@codethink.co.uk>2015-04-08 18:29:23 +0100
commitf41a9c330d16c546407d91e8a549e48154d967f7 (patch)
treeb744bd5541fba8a171066e0e52bd48e595c4bafe /openstack/etc/nova/rootwrap.conf
parentc6d832f7cf10e1f986a617735c1f2a59b26f751f (diff)
downloaddefinitions-f41a9c330d16c546407d91e8a549e48154d967f7.tar.gz
WIP: Add OpenStack initial configuration
TODO: Split this out into: 1. initial config (openstack/etc) default values 2+. as many individual changes to initial config as possible to extract, including support scripts and configuration extensions
Diffstat (limited to 'openstack/etc/nova/rootwrap.conf')
-rw-r--r--openstack/etc/nova/rootwrap.conf27
1 files changed, 27 insertions, 0 deletions
diff --git a/openstack/etc/nova/rootwrap.conf b/openstack/etc/nova/rootwrap.conf
new file mode 100644
index 00000000..aa466c5d
--- /dev/null
+++ b/openstack/etc/nova/rootwrap.conf
@@ -0,0 +1,27 @@
+# Configuration for nova-rootwrap
+# This file should be owned by (and only-writeable by) the root user
+
+[DEFAULT]
+# List of directories to load filter definitions from (separated by ',').
+# These directories MUST all be only writeable by root !
+filters_path=/etc/nova/rootwrap.d,/usr/share/nova/rootwrap
+
+# List of directories to search executables in, in case filters do not
+# explicitely specify a full path (separated by ',')
+# If not specified, defaults to system PATH environment variable.
+# These directories MUST all be only writeable by root !
+exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin
+
+# Enable logging to syslog
+# Default value is False
+use_syslog=False
+
+# Which syslog facility to use.
+# Valid values include auth, authpriv, syslog, local0, local1...
+# Default value is 'syslog'
+syslog_log_facility=syslog
+
+# Which messages to log.
+# INFO means log all usage
+# ERROR means only log unsuccessful attempts
+syslog_log_level=ERROR