Skip to content

Commit

Permalink
Add privsep-helper to neutron sudoers file
Browse files Browse the repository at this point in the history
With the new oslo-privsep library, there is now a
privsep-helper command that is used to escalate
privledges.

This command needs to be runnable by the neutron user
via sudo without a password. The old rootwrap command
is still used as well, so for now we need to have
both.

Change-Id: I8e9743da3e51e71a113d958c22007cf54aa17fc4
  • Loading branch information
mnaser committed Apr 1, 2019
1 parent 01857d4 commit 668fb5a
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions templates/sudoers.j2
Original file line number Diff line number Diff line change
Expand Up @@ -5,3 +5,4 @@ Defaults:{{ neutron_system_user_name }} secure_path="{{ neutron_bin }}:/usr/loca

{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap-daemon
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/privsep-helper

0 comments on commit 668fb5a

Please sign in to comment.