summaryrefslogtreecommitdiff
path: root/etc/neutron/rootwrap.d/debug.filters
blob: 2fc1ae4ebd8170bb3f4ae9eee502b453a89b3aaa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
# neutron-rootwrap command filters for nodes on which neutron is
# expected to control network
#
# This file should be owned by (and only-writeable by) the root user

# format seems to be
# cmd-name: filter-name, raw-command, user, args

[Filters]

# This is needed because we should ping
# from inside a namespace which requires root
# _alt variants allow to match -c and -w in any order
#   (used by NeutronDebugAgent.ping_all)
ping: CommandFilter, ping, root
ping6: CommandFilter, ping6, root
ping_exec: IpNetnsExecFilter, ping, root
ping6_exec: IpNetnsExecFilter, ping6, root

# "sleep" command, only for testing
sleep: RegExpFilter, sleep, root, sleep, \d+
kill_sleep: KillFilter, root, sleep, -9

# "ncat" command, only for testing
ncat: RegExpFilter, ncat, root, ncat, [0-9A-Fa-f:]+, \d+, .*
ncat_exec: IpNetnsExecFilter, ncat, root