summaryrefslogtreecommitdiff
path: root/openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters
diff options
context:
space:
mode:
authorPedro Alvarez <pedro.alvarez@codethink.co.uk>2015-03-16 12:01:59 +0000
committerPedro Alvarez <pedro.alvarez@codethink.co.uk>2015-03-16 17:35:18 +0000
commitbd3ce4367a020f48c2af56d3e44272bfd8804b64 (patch)
treefaeb0e194c26609b69697720a43b241ea4d4a9f2 /openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters
parentb9873751e788b66cc0451cbdc8a568a25379c3bb (diff)
downloaddefinitions-bd3ce4367a020f48c2af56d3e44272bfd8804b64.tar.gz
neutron: move templates
Diffstat (limited to 'openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters')
-rw-r--r--openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters16
1 files changed, 16 insertions, 0 deletions
diff --git a/openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters b/openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters
new file mode 100644
index 00000000..69e4afcc
--- /dev/null
+++ b/openstack/usr/share/openstack/neutron/rootwrap.d/cisco-apic.filters
@@ -0,0 +1,16 @@
+# neutron-rootwrap command filters for nodes on which neutron is
+# expected to control network
+#
+# This file should be owned by (and only-writeable by) the root user
+
+# format seems to be
+# cmd-name: filter-name, raw-command, user, args
+
+[Filters]
+
+# cisco-apic filters
+lldpctl: CommandFilter, lldpctl, root
+
+# ip_lib filters
+ip: IpFilter, ip, root
+ip_exec: IpNetnsExecFilter, ip, root