openstack
/
charm-nova-compute
Code Issues Proposed changes

Merge "Add ceph paths to usr.bin.nova-compute aa profile"

This commit is contained in:
Zuul 2017-11-24 09:53:23 +00:00 committed by Gerrit Code Review
parent a94fa1d584 0423eae1df
commit f65fd7aaed
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
templates/usr.bin.nova-compute
View File

@ -70,9 +70,7 @@
/sys/devices/system/node/** r,
/sys/devices/virtual/block/nbd*/ r,
/sys/devices/virtual/net/** w,
/tmp/* rw,
/tmp/*/ rw,
/tmp/** rw,
/tmp/{,**} rw,
/usr/bin/ r,
/usr/bin/* rix,
/usr/lib/gcc/x86_64-linux-gnu/4.8/collect2 rix,
@ -87,7 +85,7 @@
/var/run/libvirt/* rw,
/var/run/libvirt/libvirt-sock rw,
/var/run/openvswitch/db.sock rw,
/var/tmp/* w,
/var/tmp/{,**} rw,
{% if ubuntu_release <= '12.04' %}
/proc/*/mounts r,
/proc/*/status r,
@ -95,4 +93,6 @@
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/status r,
{% endif %}
/var/lib/charm/*/ceph.conf r,
/etc/ceph/* r,
}