1
# nova-rootwrap command filters for network nodes
2
# This file should be owned by (and only-writeable by) the root user
5
# nova/virt/libvirt/vif.py: 'ip', 'tuntap', 'add', dev, 'mode', 'tap'
6
# nova/virt/libvirt/vif.py: 'ip', 'link', 'set', dev, 'up'
7
# nova/virt/libvirt/vif.py: 'ip', 'link', 'delete', dev
8
# nova/network/linux_net.py: 'ip', 'addr', 'add', str(floating_ip)+'/32'i..
9
# nova/network/linux_net.py: 'ip', 'addr', 'del', str(floating_ip)+'/32'..
10
# nova/network/linux_net.py: 'ip', 'addr', 'add', '169.254.169.254/32',..
11
# nova/network/linux_net.py: 'ip', 'addr', 'show', 'dev', dev, 'scope',..
12
# nova/network/linux_net.py: 'ip', 'addr', 'del/add', ip_params, dev)
13
# nova/network/linux_net.py: 'ip', 'addr', 'del', params, fields[-1]
14
# nova/network/linux_net.py: 'ip', 'addr', 'add', params, bridge
15
# nova/network/linux_net.py: 'ip', '-f', 'inet6', 'addr', 'change', ..
16
# nova/network/linux_net.py: 'ip', 'link', 'set', 'dev', dev, 'promisc',..
17
# nova/network/linux_net.py: 'ip', 'link', 'add', 'link', bridge_if ...
18
# nova/network/linux_net.py: 'ip', 'link', 'set', interface, address,..
19
# nova/network/linux_net.py: 'ip', 'link', 'set', interface, 'up'
20
# nova/network/linux_net.py: 'ip', 'link', 'set', bridge, 'up'
21
# nova/network/linux_net.py: 'ip', 'addr', 'show', 'dev', interface, ..
22
# nova/network/linux_net.py: 'ip', 'link', 'set', dev, address, ..
23
# nova/network/linux_net.py: 'ip', 'link', 'set', dev, 'up'
24
# nova/network/linux_net.py: 'ip', 'route', 'add', ..
25
# nova/network/linux_net.py: 'ip', 'route', 'del', .
26
# nova/network/linux_net.py: 'ip', 'route', 'show', 'dev', dev
27
ip: CommandFilter, ip, root
29
# nova/virt/libvirt/vif.py: 'ovs-vsctl', ...
30
# nova/virt/libvirt/vif.py: 'ovs-vsctl', 'del-port', ...
31
# nova/network/linux_net.py: 'ovs-vsctl', ....
32
ovs-vsctl: CommandFilter, ovs-vsctl, root
34
# nova/network/linux_net.py: 'ovs-ofctl', ....
35
ovs-ofctl: CommandFilter, ovs-ofctl, root
37
# nova/virt/libvirt/vif.py: 'ivs-ctl', ...
38
# nova/virt/libvirt/vif.py: 'ivs-ctl', 'del-port', ...
39
# nova/network/linux_net.py: 'ivs-ctl', ....
40
ivs-ctl: CommandFilter, ivs-ctl, root
42
# nova/virt/libvirt/vif.py: 'ifc_ctl', ...
43
ifc_ctl: CommandFilter, /opt/pg/bin/ifc_ctl, root
45
# nova/virt/libvirt/vif.py: 'ebrctl', ...
46
ebrctl: CommandFilter, ebrctl, root
48
# nova/virt/libvirt/vif.py: 'mm-ctl', ...
49
mm-ctl: CommandFilter, mm-ctl, root
51
# nova/network/linux_net.py: 'ebtables', '-D' ...
52
# nova/network/linux_net.py: 'ebtables', '-I' ...
53
ebtables: CommandFilter, ebtables, root
54
ebtables_usr: CommandFilter, ebtables, root
56
# nova/network/linux_net.py: 'ip[6]tables-save' % (cmd, '-t', ...
57
iptables-save: CommandFilter, iptables-save, root
58
ip6tables-save: CommandFilter, ip6tables-save, root
60
# nova/network/linux_net.py: 'ip[6]tables-restore' % (cmd,)
61
iptables-restore: CommandFilter, iptables-restore, root
62
ip6tables-restore: CommandFilter, ip6tables-restore, root
64
# nova/network/linux_net.py: 'arping', '-U', floating_ip, '-A', '-I', ...
65
# nova/network/linux_net.py: 'arping', '-U', network_ref['dhcp_server'],..
66
arping: CommandFilter, arping, root
68
# nova/network/linux_net.py: 'dhcp_release', dev, address, mac_address
69
dhcp_release: CommandFilter, dhcp_release, root
71
# nova/network/linux_net.py: 'kill', '-9', pid
72
# nova/network/linux_net.py: 'kill', '-HUP', pid
73
kill_dnsmasq: KillFilter, root, /usr/sbin/dnsmasq, -9, -HUP
75
# nova/network/linux_net.py: 'kill', pid
76
kill_radvd: KillFilter, root, /usr/sbin/radvd
78
# nova/network/linux_net.py: dnsmasq call
79
dnsmasq: EnvFilter, env, root, CONFIG_FILE=, NETWORK_ID=, dnsmasq
81
# nova/network/linux_net.py: 'radvd', '-C', '%s' % _ra_file(dev, 'conf'..
82
radvd: CommandFilter, radvd, root
84
# nova/network/linux_net.py: 'brctl', 'addbr', bridge
85
# nova/network/linux_net.py: 'brctl', 'setfd', bridge, 0
86
# nova/network/linux_net.py: 'brctl', 'stp', bridge, 'off'
87
# nova/network/linux_net.py: 'brctl', 'addif', bridge, interface
88
brctl: CommandFilter, brctl, root
90
# nova/network/linux_net.py: 'sysctl', ....
91
sysctl: CommandFilter, sysctl, root
93
# nova/network/linux_net.py: 'conntrack'
94
conntrack: CommandFilter, conntrack, root