openstack/cinder
Code Issues Proposed changes

Adds getfattr and mount to Cinder rootwrap volume.filters

Browse Source 
Adds getfattr and mount.quobyte which are run with root
ownership by the Quobyte driver if
nas_secure_file_operations is set to false.

Closes-Bug: #1586953

Change-Id: I135d96afb460e94f4396beb01894f731b562e614
This commit is contained in:
Silvan Kaiser 2016-05-30 12:16:39 +02:00
parent 349bda1774
commit 96b873419c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
etc/cinder/rootwrap.d/volume.filters
View File

@ -222,3 +222,8 @@ ploop: CommandFilter, ploop, root
# initiator/connector.py:
drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
# cinder/volume/drivers/quobyte.py
getfattr: CommandFilter, getfattr, root
mount.quobyte: CommandFilter, getfattr, root