summaryrefslogtreecommitdiff
path: root/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
diff options
context:
space:
mode:
Diffstat (limited to 'openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters')
-rw-r--r--openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters9
1 files changed, 9 insertions, 0 deletions
diff --git a/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
new file mode 100644
index 00000000..4132a999
--- /dev/null
+++ b/openstack/etc/nova/rootwrap.d/baremetal-compute-ipmi.filters
@@ -0,0 +1,9 @@
+# nova-rootwrap command filters for compute nodes
+# This file should be owned by (and only-writeable by) the root user
+
+[Filters]
+# nova/virt/baremetal/ipmi.py: 'ipmitool', ..
+ipmitool: CommandFilter, ipmitool, root
+
+# nova/virt/baremetal/ipmi.py: 'kill', '-TERM', str(console_pid)
+kill_shellinaboxd: KillFilter, root, /usr/local/bin/shellinaboxd, -15, -TERM