Add ChainingRegExpFilter into rootwrap

Registered by Tomoki Sekiyama on 2014-06-02

Add new filter which accepts utilities prefixed to other commands, such as 'nice' and 'ionice'.
This will increase maintenability of config file.

For example, cinder is currently using 3 RegExpFilter rules to 'ionice' + 'dd' command to cover various 'dd' options. But it is easy to be broken (and actually it's broken now) by a change of 'dd' usage.
By adding ChainingRegExpFilter, 'ionice' can be accepted by single rule below safely (that is, accepted only when the following command is acceptable by other filters).

  ionice: ChainingRegExpFilter, ionice, root, ionice, -c[0-3]( -n[0-7])?

Blueprint information

Status:
Complete
Approver:
Doug Hellmann
Priority:
Medium
Drafter:
Tomoki Sekiyama
Direction:
Needs approval
Assignee:
Tomoki Sekiyama
Definition:
Approved
Series goal:
Accepted for juno
Implementation:
Implemented
Milestone target:
milestone icon juno-2
Started by
Tomoki Sekiyama on 2014-06-03
Completed by
Thierry Carrez on 2014-07-01

Related branches

Sprints

Whiteboard

A patch to implement this blueprint is uploaded: https://review.openstack.org/#/c/97336/

Gerrit topic: https://review.openstack.org/#q,topic:bp/chaining-regexp-filter,n,z

Addressed by: https://review.openstack.org/98536
    Add ChainingRegExpFilter into rootwrap

Sorry for the noise, script approval fail. Ignore me :)

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.