Skip to content

Commit

Permalink
dhcp.filters needs ovs_vsctl permission
Browse files Browse the repository at this point in the history
The dhcp agent calls ovs_vsctl so it will fail if using rootwrap
and these aren't specified. The reason why this was working using
rootwrap before is because there are other filters in
etc/quantum/rootwrap.d that specifiy ovs_vsctl which
allows the agent to make those calls. Fixes bug 1090072

Change-Id: I509c191c97e7187361a09788e841ebb5a9f934c7
  • Loading branch information
aaronorosen committed Dec 13, 2012
1 parent 5afac1d commit 0e05ddd
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions etc/quantum/rootwrap.d/dhcp.filters
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,10 @@ kill_dnsmasq_usr: KillFilter, root, /usr/sbin/dnsmasq, -9, -HUP

# dhcp-agent uses cat
cat: RegExpFilter, /bin/cat, root, cat, /proc/\d+/cmdline
ovs-vsctl: CommandFilter, /bin/ovs-vsctl, root
ovs-vsctl_usr: CommandFilter, /usr/bin/ovs-vsctl, root
ovs-vsctl_sbin: CommandFilter, /sbin/ovs-vsctl, root
ovs-vsctl_sbin_usr: CommandFilter, /usr/sbin/ovs-vsctl, root

# ip_lib
ip: IpFilter, /sbin/ip, root
Expand Down

0 comments on commit 0e05ddd

Please sign in to comment.