diff options
| author | Michael Still <mikal@stillhq.com> | 2017-09-18 23:16:52 +1000 |
|---|---|---|
| committer | Michael Still <mikal@stillhq.com> | 2017-09-18 23:17:35 +1000 |
| commit | 90e91ca05245c889949d241cc14902f8496a9b7b (patch) | |
| tree | a6589cf0f5d7c4628746949ebaba6abd300c902e /etc | |
| parent | e00d8eb7593edb443f18c779b3fedc5bb91d79f8 (diff) | |
| download | nova-90e91ca05245c889949d241cc14902f8496a9b7b.tar.gz | |
Squash dacnet_admin privsep context.
As discussed at the PTG, we're going to use one big context for
ease of management.
Change-Id: I951abd402736735730e0868f31b85b1817055b2f
blueprint: hurrah-for-privsep
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/nova/rootwrap.d/compute.filters | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/etc/nova/rootwrap.d/compute.filters b/etc/nova/rootwrap.d/compute.filters index dcee0c1126..014ac19de4 100644 --- a/etc/nova/rootwrap.d/compute.filters +++ b/etc/nova/rootwrap.d/compute.filters @@ -198,8 +198,6 @@ scsi_id: CommandFilter, /lib/udev/scsi_id, root # and (implicitly) the actual python code invoked. privsep-rootwrap-os_brick: RegExpFilter, privsep-helper, root, privsep-helper, --config-file, /etc/(?!\.\.).*, --privsep_context, os_brick.privileged.default, --privsep_sock_path, /tmp/.* -privsep-rootwrap-dacnet_admin: RegExpFilter, privsep-helper, root, privsep-helper, --config-file, /etc/(?!\.\.).*, --privsep_context, nova.privsep.dacnet_admin_pctxt, --privsep_sock_path, /tmp/.* - privsep-rootwrap-sys_admin: RegExpFilter, privsep-helper, root, privsep-helper, --config-file, /etc/(?!\.\.).*, --privsep_context, nova.privsep.sys_admin_pctxt, --privsep_sock_path, /tmp/.* # nova/virt/libvirt/storage/dmcrypt.py: |