1
# nova-rootwrap command filters for api-metadata nodes
2
# This is needed on nova-api hosts running with "metadata" in enabled_apis
3
# or when running nova-api-metadata
4
# This file should be owned by (and only-writeable by) the root user
7
# nova/network/linux_net.py: 'ip[6]tables-save' % (cmd, '-t', ...
8
iptables-save: CommandFilter, /sbin/iptables-save, root
9
iptables-save_usr: CommandFilter, /usr/sbin/iptables-save, root
10
ip6tables-save: CommandFilter, /sbin/ip6tables-save, root
11
ip6tables-save_usr: CommandFilter, /usr/sbin/ip6tables-save, root
13
# nova/network/linux_net.py: 'ip[6]tables-restore' % (cmd,)
14
iptables-restore: CommandFilter, /sbin/iptables-restore, root
15
iptables-restore_usr: CommandFilter, /usr/sbin/iptables-restore, root
16
ip6tables-restore: CommandFilter, /sbin/ip6tables-restore, root
17
ip6tables-restore_usr: CommandFilter, /usr/sbin/ip6tables-restore, root