diff options
| author | Brent Eagles <beagles@redhat.com> | 2016-08-19 14:51:26 -0230 |
|---|---|---|
| committer | Brent Eagles <beagles@redhat.com> | 2016-09-02 14:01:38 -0230 |
| commit | 58de26288cc51af8caaaafa86588b2e488aa0ca4 (patch) | |
| tree | e87b139cb411d9a9135d87364c4b0b7a578ab24e /etc | |
| parent | f3d001f36c8ac6482e48ff912c937adc6e26f700 (diff) | |
| download | nova-58de26288cc51af8caaaafa86588b2e488aa0ca4.tar.gz | |
Add bigswitch command to compute rootwrap filters
'ivs-ctl' is called from the libvirt vif driver. While the filter exists
in network.filters, as the command is still used by nova compute it is
consistent to include it in compute.filters.
Change-Id: Icf61dba632fee26461ac18246ecf6a93f6bde346
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/nova/rootwrap.d/compute.filters | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/nova/rootwrap.d/compute.filters b/etc/nova/rootwrap.d/compute.filters index 07f18eab3b..5a486a011f 100644 --- a/etc/nova/rootwrap.d/compute.filters +++ b/etc/nova/rootwrap.d/compute.filters @@ -86,6 +86,9 @@ tunctl: CommandFilter, tunctl, root # nova/network/linux_net.py: 'ovs-vsctl', .... ovs-vsctl: CommandFilter, ovs-vsctl, root +# nova/network/linux_net.py: 'ivs-ctl', .... +ivs-ctl: CommandFilter, ivs-ctl, root + # nova/virt/libvirt/vif.py: 'vrouter-port-control', ... vrouter-port-control: CommandFilter, vrouter-port-control, root |