diff options
| author | Michael Still <mikal@stillhq.com> | 2017-09-27 06:30:14 +1000 |
|---|---|---|
| committer | Michael Still <mikal@stillhq.com> | 2017-09-28 07:29:51 +1000 |
| commit | c1eb6f0e5078051ff03e4592e5aaff7cf04aa449 (patch) | |
| tree | cfa5b3302c33e069772efc6b9f66164e77a8ee83 /etc | |
| parent | 86abab061f2d80ea8e090c93657498e725a296f5 (diff) | |
| download | nova-c1eb6f0e5078051ff03e4592e5aaff7cf04aa449.tar.gz | |
Move ploop commands to privsep.
The same pattern as the others, but with an added security concern.
Co-Authored-By: Evgeny Antyshev <eantyshev@virtuozzo.com>
Closes-Bug: #1717533
Change-Id: I1ac3a0ea4756ec68884866435c3da69171bbeb13
blueprint: hurrah-for-privsep
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/nova/rootwrap.d/compute.filters | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/etc/nova/rootwrap.d/compute.filters b/etc/nova/rootwrap.d/compute.filters index 014ac19de4..2d2b2df349 100644 --- a/etc/nova/rootwrap.d/compute.filters +++ b/etc/nova/rootwrap.d/compute.filters @@ -218,13 +218,6 @@ cp: CommandFilter, cp, root # nova/virt/xenapi/vm_utils.py: sync: CommandFilter, sync, root -# nova/virt/libvirt/imagebackend.py: -ploop: RegExpFilter, ploop, root, ploop, restore-descriptor, .* -prl_disk_tool: RegExpFilter, prl_disk_tool, root, prl_disk_tool, resize, --size, .*M$, --resize_partition, --hdd, .* - -# nova/virt/libvirt/utils.py: -ploop: RegExpFilter, ploop, root, ploop, init, -s, .*, -f, .*, -t, .*, .* - # nova/virt/libvirt/utils.py: 'xend', 'status' xend: CommandFilter, xend, root |