From ee53974ddc864535bbc99302d16da11287affe47 Mon Sep 17 00:00:00 2001 From: Richard Maw Date: Mon, 23 Mar 2015 21:06:52 +0000 Subject: WIP: Add OpenStack initial configuration TODO: Split this out into: 1. initial config (openstack/etc) default values 2+. as many individual changes to initial config as possible to extract, including support scripts and configuration extensions --- openstack/etc/neutron/rootwrap.d/vpnaas.filters | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 openstack/etc/neutron/rootwrap.d/vpnaas.filters (limited to 'openstack/etc/neutron/rootwrap.d/vpnaas.filters') diff --git a/openstack/etc/neutron/rootwrap.d/vpnaas.filters b/openstack/etc/neutron/rootwrap.d/vpnaas.filters new file mode 100644 index 00000000..7848136b --- /dev/null +++ b/openstack/etc/neutron/rootwrap.d/vpnaas.filters @@ -0,0 +1,13 @@ +# neutron-rootwrap command filters for nodes on which neutron is +# expected to control network +# +# This file should be owned by (and only-writeable by) the root user + +# format seems to be +# cmd-name: filter-name, raw-command, user, args + +[Filters] + +ip: IpFilter, ip, root +ip_exec: IpNetnsExecFilter, ip, root +openswan: CommandFilter, ipsec, root -- cgit v1.2.1