f26ffd7222
I noticed that nova, neutron and cinder's rootwrap exec_dirs include
/usr/local/{sbin,bin} which is a standardised location for admins to
install non-distro executables, and these executables are no less
"trustworthy" than /usr/bin and friends. See neutron and cinder's
rootwrap.conf (and probably others), and typical distro default values
for sudoers/secure_path for extremely similar precedents that all include
/usr/local/*bin.
See the same patch of nova for more information:
https://review.openstack.org/#/c/280052/1
And see I710cf142b834381c00e651cfc062299ae755c33f for brief discussion
of doing this via devstack before.
Change-Id: I1be8ff63d06424e84ea2b39bc0d285fe95beebb2
|
||
|---|---|---|
| .. | ||
| oslo-config-generator | ||
| rootwrap.d | ||
| orchestrator.ini | ||
| provider_rules.json | ||
| rootwrap.conf | ||