rootwrap filter for iptables-save/restore incomplete

[Dirk Mueller]

On SUSE, iptables-save and iptables-restore is in /usr/sbin/ on SUSE. The current rootwrap filters are not providing an entry for this location, so their calls are failing.

It seems Quantum needs a port of https://review.openstack.org/#/c/16766/ to solve this for all possible variants.

[Thierry Carrez (ttx)]

Making Quantum converge to use the oslo common rootwrap is planned for Havana... so maybe the best for the moment is to quickly fix this by duplicating filters so that they allow both paths.

[Dirk Mueller (dmllr)]

Actually it is my plan to submit a oslo based rotwrap update for Quantum. See the pending review request.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/grizzly
Review: https://review.openstack.org/29645

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/24539
Committed: http://github.com/openstack/quantum/commit/d1a623bc97d26b55dde5431d6445a556b5a27c21
Submitter: Jenkins
Branch: master

commit d1a623bc97d26b55dde5431d6445a556b5a27c21
Author: Dirk Mueller <email address hidden>
Date: Sat May 18 17:06:30 2013 +0200

    Use exec_dirs for rootwrap commands

    Avoid depending on platform specific paths for rootwrap
    by using exec_dirs in rootwrap. Fixes rootwrap configuration
    for SUSE.

    Fixes bug #1156044

    Change-Id: I54d082c543fd84b40db0caa3571300ac0bb07b57

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/grizzly
Review: https://review.openstack.org/30870

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/29645
Committed: http://github.com/openstack/quantum/commit/db364347408cbf55740259c6be33ee5574d30560
Submitter: Jenkins
Branch: stable/grizzly

commit db364347408cbf55740259c6be33ee5574d30560
Author: Dirk Mueller <email address hidden>
Date: Sat May 18 17:13:02 2013 +0200

    Add _usr variants for iptables rootwraps

    On SUSE, the paths are inside /usr for totally
    weird reasons.

    Fixes bug #1156044

    Change-Id: I7f98359f89236891289fc24d62949d7097d774dd