summaryrefslogtreecommitdiff
path: root/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
diff options
context:
space:
mode:
authorMark Doffman <mark.doffman@codethink.co.uk>2014-09-03 19:12:50 +0000
committerMark Doffman <mark.doffman@codethink.co.uk>2014-10-02 02:46:23 +0000
commit0f0bb39104d35cfcf2a01eeb1866927945bcfa8a (patch)
tree98338062b2ac0101c95c94a7299eedff538fc614 /openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
parentf1da7ace54bed18c5c7eac5242ec84d4ca81c55d (diff)
downloaddefinitions-baserock/markdoffman/openstack.tar.gz
Openstack services strata and configuration.baserock/markdoffman/openstack
Add a stratum for openstack services that includes all the core openstack service code and daemons. Add configuration files for keystone, glance, nova and nova-compute. Add a system and cluster definition that builds an image that runs keystone, glance and nova.
Diffstat (limited to 'openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters')
-rw-r--r--openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters9
1 files changed, 9 insertions, 0 deletions
diff --git a/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
new file mode 100644
index 00000000..4132a999
--- /dev/null
+++ b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
@@ -0,0 +1,9 @@
+# nova-rootwrap command filters for compute nodes
+# This file should be owned by (and only-writeable by) the root user
+
+[Filters]
+# nova/virt/baremetal/ipmi.py: 'ipmitool', ..
+ipmitool: CommandFilter, ipmitool, root
+
+# nova/virt/baremetal/ipmi.py: 'kill', '-TERM', str(console_pid)
+kill_shellinaboxd: KillFilter, root, /usr/local/bin/shellinaboxd, -15, -TERM