From 96b873419c16744786b99ac9b39c9773d13d50d3 Mon Sep 17 00:00:00 2001 From: Silvan Kaiser Date: Mon, 30 May 2016 12:16:39 +0200 Subject: [PATCH] Adds getfattr and mount to Cinder rootwrap volume.filters Adds getfattr and mount.quobyte which are run with root ownership by the Quobyte driver if nas_secure_file_operations is set to false. Closes-Bug: #1586953 Change-Id: I135d96afb460e94f4396beb01894f731b562e614 --- etc/cinder/rootwrap.d/volume.filters | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/etc/cinder/rootwrap.d/volume.filters b/etc/cinder/rootwrap.d/volume.filters index 69cf66e3dd0..eb2d07dec75 100644 --- a/etc/cinder/rootwrap.d/volume.filters +++ b/etc/cinder/rootwrap.d/volume.filters @@ -222,3 +222,8 @@ ploop: CommandFilter, ploop, root # initiator/connector.py: drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid + +# cinder/volume/drivers/quobyte.py +getfattr: CommandFilter, getfattr, root +mount.quobyte: CommandFilter, getfattr, root +