Merge "Add missing rootwrap filter for cryptsetup"

openstack · May 18, 2017 · 49b85bd · 49b85bd
2 parents 3306ae1 + a963aec
commit 49b85bd
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/etc/nova/rootwrap.d/compute.filters b/etc/nova/rootwrap.d/compute.filters
@@ -225,6 +225,9 @@ privsep-rootwrap: RegExpFilter, privsep-helper, root, privsep-helper, --config-f
 # nova/storage/linuxscsi.py: sg_scan device
 sg_scan: CommandFilter, sg_scan, root
 
+# nova/virt/libvirt/storage/dmcrypt.py:
+cryptsetup: CommandFilter, cryptsetup, root
+
 # nova/virt/xenapi/vm_utils.py:
 xenstore-read: CommandFilter, xenstore-read, root