From 9140cd991e5507f65ff1d6a608bd8fd4c9956dbf Mon Sep 17 00:00:00 2001
From: Soren Hansen <soren.hansen@rackspace.com>
Date: Mon, 27 Sep 2010 22:00:17 +0200
Subject: Set priority of security group rules to 300 to make sure they
 override the defaults.

---
 nova/virt/libvirt_conn.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nova/virt/libvirt_conn.py b/nova/virt/libvirt_conn.py
index a7370e036..d90853084 100644
--- a/nova/virt/libvirt_conn.py
+++ b/nova/virt/libvirt_conn.py
@@ -561,7 +561,7 @@ class NWFilterFirewall(object):
         security_group = db.security_group_get({}, security_group_id)
         rule_xml = ""
         for rule in security_group.rules:
-            rule_xml += "<rule action='accept' direction='in' priority='900'>"
+            rule_xml += "<rule action='accept' direction='in' priority='300'>"
             if rule.cidr:
                 rule_xml += "<%s srcipaddr='%s' " % (rule.protocol, rule.cidr)
                 if rule.protocol in ['tcp', 'udp']:
-- 
cgit