From 0a3be85636e9b818fd7560a54b309cf056764140 Mon Sep 17 00:00:00 2001 From: Zuul Date: Fri, 4 Dec 2020 01:36:37 +0000 Subject: [PATCH] Update git submodules * Update kuryr from branch 'master' to d36befada61e1376479536c0e62d1e769eee846c - Merge "Remove run_as_root which fails without root_helper" - Remove run_as_root which fails without root_helper It appears that this library is typically run as the root user which shouldn't require 'run_as_root'. When running as an unprivileged user the required permissions can be granted by specifying 'AmbientCapabilities = CAP_NET_ADMIN' in the service, rather than 'CapabilityBoundingSet'. An alternative approach would be to specify a 'root_helper' or to switch to oslo.privsep, but these don't fully solve the problem as the 'pyroute2' library also requires 'CAP_NET_ADMIN'. Closes-Bug: #1852105 Change-Id: I9d0942f1cfc06cc3a7585683a030516096297767 --- kuryr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kuryr b/kuryr index 9de711070e..d36befada6 160000 --- a/kuryr +++ b/kuryr @@ -1 +1 @@ -Subproject commit 9de711070eeb3bf16c1cda12555d5ffc7013aad9 +Subproject commit d36befada61e1376479536c0e62d1e769eee846c