openstack/neutron
Code Issues Proposed changes

Merge "Support rootwrap sysctl and conntrack commands for non-l3 nodes"

Browse Source
This commit is contained in:
Jenkins 2016-01-08 11:59:07 +00:00 committed by Gerrit Code Review
commit b6a2a659e4
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/neutron/rootwrap.d/iptables-firewall.filters
View File

@ -19,3 +19,10 @@ ip6tables-restore: CommandFilter, ip6tables-restore, root
# "iptables", "-A", ... # "iptables", "-A", ...
iptables: CommandFilter, iptables, root iptables: CommandFilter, iptables, root
ip6tables: CommandFilter, ip6tables, root ip6tables: CommandFilter, ip6tables, root
# neutron/agent/linux/iptables_manager.py
# "sysctl", "-w", ...
sysctl: CommandFilter, sysctl, root
# neutron/agent/linux/ip_conntrack.py
conntrack: CommandFilter, conntrack, root