[rfe] modify our usage of privsep in nova
Bug #1996213 reported by
Sylvain Bauza
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Compute (nova) |
In Progress
|
Wishlist
|
Jorge San Emeterio | ||
Bug Description
Nova compute services use the privsep library [1] for specific 'root' privilege usage for a command or a direct call to the system.
Unfortunately, our current usage we do from this library is not really a good recommendation : instead of using a sysadmin context that uses *all* privileged caps for any caller we have [2], we should rather define a per-call context with specific caps.
[1] https:/
[2] https:/
| Changed in nova: | |
| assignee: | nobody → Jorge San Emeterio (jsanemet) |
Revision history for this message
| Jorge San Emeterio (jsanemet) wrote | #1 |
| Changed in nova: | |
| status: | Triaged → In Progress |
To post a comment you must log in.
I will post my proposal and more at the following etherpad: https:/