oslo.git/openstack/common/rootwrap, branch shared-key-msg

Fixes files with wrong bitmode

2013-08-13T12:36:30+00:00

Some modules have bitmode 755. Changed to 644

Change-Id: I2084779186fcbd5ee2010451531355a0c67897f5

Remove DnsmasqFilter and DeprecatedDnsmasqFilter

2013-07-20T06:47:23+00:00

EnvFilter supersedes both, so remove them as all
usages have been converted to EnvFilter.

Change-Id: I5acb0c924815caae1f96ed2fa6ee8b1f7ed93cf4

Handle empty arglists in Filters

2013-07-03T09:26:03+00:00

The various filters either asserted or incorrectly
assumed that an empty arglist matched the filter.
Add testcases to avoid regressions.

Change-Id: If90fbad3d54749ecc645071675402ea2613870a2

Handle empty PATH environment variable

2013-06-28T06:45:27+00:00

In locked down environments, PATH might be unavailable
when running rootwrap.

Change-Id: Ia55514a7d69ab26c2bcf5d1839da1d36aaf46ebc

Add IpFilter, IPNetnsExecFilter and EnvFilter

2013-06-20T12:36:43+00:00

These filters have been implemented in Quantum before:

- IpFilter provides support for filtering ip commands
- IpNetnsExecFilter is a chaining command filter that
  verifies that the command to be executed by ip netns exec
  is covered by other established filters.

IpNetnsExecFilter has been restricted to ensure that the
filter chains have all matching filters run as the same
user.

EnvFilter is a new filter derived from CommandFilter
that allows a Command to be optionally prefixed by "env"
and a specific list of environment variables.

This is intended to replace the specific DnsmasqFilter
and DnsmasqNetnsFilter in the future when all consumers
have been updated.

Implements bp rootwrap-quantum-features

Change-Id: I0cf39967126e99a8dc53d21bee824a0fe2f63aa0

Handle relative path arguments in Killfilter

2013-06-12T18:00:45+00:00

KillFilter currently expects an absolute path
to be specified for the process name to kill. This
is inconvenient when the exact location of the running
binary is not known or differs accross installs.

Extend KillFilter to accept also commands in $PATH
to be killed if the given argument is not absolute.

Change-Id: I6b90206b587ff3f949af2c256a78ca21af31867a

Enable hacking H404 test.

2013-06-11T14:28:29+00:00

H404 - multi line docstring should start with a summary.

Change-Id: I2099e1ee81ff9657f7a07401b8e8f3327d03bdbd

Update KillFilter to stop at '\0' for readlink() function.

2013-05-15T10:58:51+00:00

Python's readlink() implementation doesn't stop at '\0' when reading
file path. Thus after dnsmasq upgrade, it may return something like
'/usr/sbin/dnsmasq\03453 (deleted)', while C's or Shell's readlink()
return '/usr/sbin/dnsmasq'. This patch fixes this problem by cutting
the readlink() results with '\0', so that KillFilter could get correct
path.

Bug 1179793

Change-Id: I7354941e0508e019c8c9b63b87ad39f52ccb51ca

Stylistic improvements from quantum-rootwrap

2013-05-09T13:10:56+00:00

As part of the convergence effort between oslo-rootwrap and
quantum-rootwrap, import stylistic improvements introduced
in quantum-rootwrap, like:

- HACKING-compliant docstrings
- More elegant return construct from match_filter in filters.py
- Remove overridden use of filters in wrapper.py

Change-Id: I49a97271b1c385feb25adf4f62add5c71962b5dd

Merge "Revert common logging use in rootwrap"

2013-04-22T21:06:18+00:00