Comment 9 for bug 1863006

Reviewed: https://review.opendev.org/749955
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=d351ba1137d3062d9953bd1a2e45664d1dc7189d
Submitter: Zuul
Branch: stable/train

commit d351ba1137d3062d9953bd1a2e45664d1dc7189d
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Feb 12 18:56:13 2020 +0000

    "ping"/"ping6" command support in rootwrap filters

    To have correct support in rootwrap, "ping"/"ping6" command should
    have the correct filters in rootwrap.

    Because "ping" command is harmless, "CommandFilter" is used to allow
    any binary call, regardless of the parameters used and the order.

    Nevertheless, this patch also proposes to use "ping"/"ping6" with
    the same parameters and a specific order, to help in the debug
    process:
    - ping[6] -W <timeout> <address>
    - ping[6] -W <timeout> -c <count> <address>
    - ping[6] -W <timeout> -c <count> -i <interval> <address>

    Those commands could be called from inside a namespace. The needed
    filter is also added in this patch.

    Depends-On: https://review.opendev.org/754960
    Change-Id: Ie5cbc0dcc76672b26cd2605f08cfd17a30b4c905
    Closes-Bug: #1863006
    (cherry picked from commit cc3b9df4268ac339d0b7316595a4148ba4c69836)