From 277c9daa3cae1f7d33e62186e72093123be2d9c6 Mon Sep 17 00:00:00 2001 From: Francisco Redondo Marchena Date: Thu, 12 Feb 2015 17:26:00 +0000 Subject: SPLITME: Add all Openstack --- openstack/etc/neutron/rootwrap.d/ofagent.filters | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 openstack/etc/neutron/rootwrap.d/ofagent.filters (limited to 'openstack/etc/neutron/rootwrap.d/ofagent.filters') diff --git a/openstack/etc/neutron/rootwrap.d/ofagent.filters b/openstack/etc/neutron/rootwrap.d/ofagent.filters new file mode 100644 index 00000000..11e42564 --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/ofagent.filters @@ -0,0 +1,16 @@ +# neutron-rootwrap command filters for nodes on which +# neutron-ofagent-agent is expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +# ovs_lib +ovs-vsctl: CommandFilter, ovs-vsctl, root + +# ip_lib +ip: IpFilter, ip, root +ip_exec: IpNetnsExecFilter, ip, root -- cgit v1.2.1