Fuel for OpenStack

  1. Bug #1429553
  2. Comment #30

Comment 30 for bug 1429553

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/275275
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=65eca547606edceedc15d8fadfd1e5822ba9f1f6
Submitter: Jenkins
Branch: master

commit 65eca547606edceedc15d8fadfd1e5822ba9f1f6
Author: Dmitry Bilunov <email address hidden>
Date: Thu Jan 21 12:07:59 2016 +0300

    Apply PAM security limits by running daemons through su

    Daemons launched from OCF scripts inherit default resource limits. It
    could confuse users and cause resource allocation fail under heavy load.

    We should run daemons requiring root privileges through su - root -c, so
    limits from limits.conf would be enforced. To make it easier to
    implement, a new wrapper "ocf_run_as_root" is implemented in
    ocf-fuel-funcs.

    Change-Id: Iea56e4d08a2c1f92500129210d79e4b1fe04e3fd
    Closes-Bug: #1429553