openstack
/
openstack-ansible-os_cinder
Code Issues Proposed changes

Update paste, policy and rootwrap configurations 2017-05-26 

Change-Id: Ide7712021d773e9001831a46bb7c353a3f9f381b
This commit is contained in:
Andy McCrae 2017-05-26 14:10:05 +01:00
parent 4a4cdf792e
commit de17bd6b77
2 changed files with 14 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
files/rootwrap.d/volume.filters
View File

@ -129,7 +129,6 @@ netapp_nfs_touch: CommandFilter, touch, root
# cinder/volume/drivers/glusterfs.py # cinder/volume/drivers/glusterfs.py
chgrp: CommandFilter, chgrp, root chgrp: CommandFilter, chgrp, root
umount: CommandFilter, umount, root umount: CommandFilter, umount, root
fallocate: CommandFilter, fallocate, root
# cinder/volumes/drivers/hds/hds.py: # cinder/volumes/drivers/hds/hds.py:
hus-cmd: CommandFilter, hus-cmd, root hus-cmd: CommandFilter, hus-cmd, root
@ -154,20 +153,20 @@ mv: CommandFilter, mv, root
# cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/ibm/gpfs.py
cp: CommandFilter, cp, root cp: CommandFilter, cp, root
mmgetstate: CommandFilter, /usr/lpp/mmfs/bin/mmgetstate, root mmgetstate: CommandFilter, mmgetstate, root
mmclone: CommandFilter, /usr/lpp/mmfs/bin/mmclone, root mmclone: CommandFilter, mmclone, root
mmlsattr: CommandFilter, /usr/lpp/mmfs/bin/mmlsattr, root mmlsattr: CommandFilter, mmlsattr, root
mmchattr: CommandFilter, /usr/lpp/mmfs/bin/mmchattr, root mmchattr: CommandFilter, mmchattr, root
mmlsconfig: CommandFilter, /usr/lpp/mmfs/bin/mmlsconfig, root mmlsconfig: CommandFilter, mmlsconfig, root
mmlsfs: CommandFilter, /usr/lpp/mmfs/bin/mmlsfs, root mmlsfs: CommandFilter, mmlsfs, root
mmlspool: CommandFilter, /usr/lpp/mmfs/bin/mmlspool, root mmlspool: CommandFilter, mmlspool, root
mkfs: CommandFilter, mkfs, root mkfs: CommandFilter, mkfs, root
mmcrfileset: CommandFilter, /usr/lpp/mmfs/bin/mmcrfileset, root mmcrfileset: CommandFilter, mmcrfileset, root
mmlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmlinkfileset, root mmlinkfileset: CommandFilter, mmlinkfileset, root
mmunlinkfileset: CommandFilter, /usr/lpp/mmfs/bin/mmunlinkfileset, root mmunlinkfileset: CommandFilter, mmunlinkfileset, root
mmdelfileset: CommandFilter, /usr/lpp/mmfs/bin/mmdelfileset, root mmdelfileset: CommandFilter, mmdelfileset, root
mmcrsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmcrsnapshot, root mmcrsnapshot: CommandFilter, mmcrsnapshot, root
mmdelsnapshot: CommandFilter, /usr/lpp/mmfs/bin/mmdelsnapshot, root mmdelsnapshot: CommandFilter, mmdelsnapshot, root
# cinder/volume/drivers/ibm/gpfs.py # cinder/volume/drivers/ibm/gpfs.py
# cinder/volume/drivers/ibm/ibmnas.py # cinder/volume/drivers/ibm/ibmnas.py

2
templates/rootwrap.conf.j2
View File

@ -10,7 +10,7 @@ filters_path=/etc/cinder/rootwrap.d,/usr/share/cinder/rootwrap
# explicitely specify a full path (separated by ',') # explicitely specify a full path (separated by ',')
# If not specified, defaults to system PATH environment variable. # If not specified, defaults to system PATH environment variable.
# These directories MUST all be only writeable by root ! # These directories MUST all be only writeable by root !
exec_dirs={{ cinder_bin }},/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin exec_dirs={{ cinder_bin }},/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin,/usr/lpp/mmfs/bin
# Enable logging to syslog # Enable logging to syslog
# Default value is False # Default value is False