manila/etc/manila/rootwrap.d/volume.filters

60 lines
1.9 KiB
XML

# manila-rootwrap command filters for volume nodes
# This file should be owned by (and only-writeable by) the root user
[Filters]
# manila/volume/iscsi.py: iscsi_helper '--op' ...
ietadm: CommandFilter, ietadm, root
tgtadm: CommandFilter, tgtadm, root
tgt-admin: CommandFilter, tgt-admin, root
rtstool: CommandFilter, rtstool, root
# manila/volume/driver.py: 'vgs', '--noheadings', '-o', 'name'
vgs: CommandFilter, vgs, root
# manila/volume/driver.py: 'lvcreate', '-L', sizestr, '-n', volume_name,..
# manila/volume/driver.py: 'lvcreate', '-L', ...
lvcreate: CommandFilter, lvcreate, root
# manila/volume/driver.py: 'dd', 'if=%s' % srcstr, 'of=%s' % deststr,...
dd: CommandFilter, dd, root
# manila/volume/driver.py: 'lvremove', '-f', %s/%s % ...
lvremove: CommandFilter, lvremove, root
# manila/volume/driver.py: 'lvdisplay', '--noheading', '-C', '-o', 'Attr',..
lvdisplay: CommandFilter, lvdisplay, root
# manila/volume/driver.py: 'iscsiadm', '-m', 'discovery', '-t',...
# manila/volume/driver.py: 'iscsiadm', '-m', 'node', '-T', ...
iscsiadm: CommandFilter, iscsiadm, root
# manila/volume/drivers/lvm.py: 'shred', '-n3'
# manila/volume/drivers/lvm.py: 'shred', '-n0', '-z', '-s%dMiB'
shred: CommandFilter, shred, root
#manila/volume/.py: utils.temporary_chown(path, 0), ...
chown: CommandFilter, chown, root
# manila/volume/driver.py
dmsetup: CommandFilter, dmsetup, root
ln: CommandFilter, ln, root
qemu-img: CommandFilter, qemu-img, root
env: CommandFilter, env, root
# manila/volume/driver.py: utils.read_file_as_root()
cat: CommandFilter, cat, root
# manila/volume/nfs.py
stat: CommandFilter, stat, root
mount: CommandFilter, mount, root
df: CommandFilter, df, root
du: CommandFilter, du, root
truncate: CommandFilter, truncate, root
chmod: CommandFilter, chmod, root
rm: CommandFilter, rm, root
lvs: CommandFilter, lvs, root
# manila/volume/scality.py
mount: CommandFilter, mount, root
dd: CommandFilter, dd, root