oslo-incubator

Add ChainingRegExpFilter into rootwrap

Registered by Tomoki Sekiyama

Add new filter which accepts utilities prefixed to other commands, such as 'nice' and 'ionice'.
This will increase maintenability of config file.

For example, cinder is currently using 3 RegExpFilter rules to 'ionice' + 'dd' command to cover various 'dd' options. But it is easy to be broken (and actually it's broken now) by a change of 'dd' usage.
By adding ChainingRegExpFilter, 'ionice' can be accepted by single rule below safely (that is, accepted only when the following command is acceptable by other filters).

  ionice: ChainingRegExpFilter, ionice, root, ionice, -c[0-3]( -n[0-7])?

Blueprint information

Status:
Complete
Approver:
Doug Hellmann
Priority:
Medium
Drafter:
Tomoki Sekiyama
Direction:
Needs approval
Assignee:
Tomoki Sekiyama
Definition:
Approved
Series goal:
Accepted for juno
Implementation:
Implemented
Milestone target:
milestone icon juno-2
Started by
Tomoki Sekiyama
Completed by
Thierry Carrez

Related branches

Sprints

Whiteboard

A patch to implement this blueprint is uploaded: https://review.openstack.org/#/c/97336/

Gerrit topic: https://review.openstack.org/#q,topic:bp/chaining-regexp-filter,n,z

Addressed by: https://review.openstack.org/98536
    Add ChainingRegExpFilter into rootwrap

Sorry for the noise, script approval fail. Ignore me :)

(?)

Work Items

Nearby

This blueprint contains Public information 
Everyone can see this information.