summaryrefslogtreecommitdiff
path: root/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
diff options
context:
space:
mode:
authorFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-02-12 17:26:00 +0000
committerFrancisco Redondo Marchena <francisco.marchena@codethink.co.uk>2015-02-12 17:26:00 +0000
commit88c8c3fc93c6b7c3b2f5e54dd19d5a84ae126626 (patch)
tree97076d768900b0f1f0361efd899ac75cf0937c6c /openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
parent1319309d3ff4eb85cb0e7e6cb178cb56ff116524 (diff)
downloaddefinitions-88c8c3fc93c6b7c3b2f5e54dd19d5a84ae126626.tar.gz
Diffstat (limited to 'openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters')
-rw-r--r--openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters9
1 files changed, 9 insertions, 0 deletions
diff --git a/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
new file mode 100644
index 00000000..4132a999
--- /dev/null
+++ b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
@@ -0,0 +1,9 @@
+# nova-rootwrap command filters for compute nodes
+# This file should be owned by (and only-writeable by) the root user
+
+[Filters]
+# nova/virt/baremetal/ipmi.py: 'ipmitool', ..
+ipmitool: CommandFilter, ipmitool, root
+
+# nova/virt/baremetal/ipmi.py: 'kill', '-TERM', str(console_pid)
+kill_shellinaboxd: KillFilter, root, /usr/local/bin/shellinaboxd, -15, -TERM