Make chown rootwrap filter ipsec.secrets file specific
The LibreSwan ipsec driver needs to be able to change the ownership of
generated ipsec.secrets files to root. This modifies the existing
rootwrap filter to allow chown operations only to be performed on files
named ipsec.secrets that have the expected UID.
Reviewed: https:/ /review. openstack. org/224133 /git.openstack. org/cgit/ openstack/ neutron- vpnaas/ commit/ ?id=d04e5527d97 433794a634510fd 2f04ee6b579667
Committed: https:/
Submitter: Jenkins
Branch: master
commit d04e5527d974337 94a634510fd2f04 ee6b579667
Author: Brent Eagles <email address hidden>
Date: Wed Sep 16 11:38:19 2015 -0230
Make chown rootwrap filter ipsec.secrets file specific
The LibreSwan ipsec driver needs to be able to change the ownership of
generated ipsec.secrets files to root. This modifies the existing
rootwrap filter to allow chown operations only to be performed on files
named ipsec.secrets that have the expected UID.
Change-Id: I1305f9e78eb5fe 718f3065e6a9e69 0293f1fca1d
Related-bug: #1493492