diff options
| author | zhurong <aaronzhu1121@gmail.com> | 2019-04-28 10:49:31 +0800 |
|---|---|---|
| committer | zhurong <aaronzhu1121@gmail.com> | 2019-04-28 11:09:05 +0800 |
| commit | bd0d5a8a27b29455e19ad062f44dd1ffb8af1abf (patch) | |
| tree | b72ceef80558ee14c90370b4841a1b5a631c148e /releasenotes/notes | |
| parent | 5f1abadf76d06946496121cbd10671378b5c0764 (diff) | |
| download | ceilometer-bd0d5a8a27b29455e19ad062f44dd1ffb8af1abf.tar.gz | |
Switch to oslo privsep
Please reference here:
https://docs.openstack.org/oslo.privsep/latest/user/index.html#converting-from-rootwrap-to-privsep
Change-Id: I5db0e64ec38d912f907b4ad483562120d030d726
Diffstat (limited to 'releasenotes/notes')
| -rw-r--r-- | releasenotes/notes/switch-to-oslo-privsep-b58f20a279f31bc0.yaml | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/releasenotes/notes/switch-to-oslo-privsep-b58f20a279f31bc0.yaml b/releasenotes/notes/switch-to-oslo-privsep-b58f20a279f31bc0.yaml new file mode 100644 index 00000000..aad3b921 --- /dev/null +++ b/releasenotes/notes/switch-to-oslo-privsep-b58f20a279f31bc0.yaml @@ -0,0 +1,15 @@ +--- +security: + - | + Privsep transitions. Ceilometer is transitioning from using the older + style rootwrap privilege escalation path to the new style Oslo privsep + path. This should improve performance and security of Ceilometer + in the long term. + - | + Privsep daemons are now started by Ceilometer when required. These + daemons can be started via rootwrap if required. rootwrap configs + therefore need to be updated to include new privsep daemon invocations. +upgrade: + - | + The following commands are no longer required to be listed in your rootwrap + configuration: ipmitool. |