Zun

Use privsep to execute privileged command

Registered by hongbin on 2017-09-20

Use privsep (https://github.com/openstack/oslo.privsep) to execute privileged command. There are potentially several places that privileged command is/will be used:
* Attach Cinder volume: https://github.com/openstack/zun/blob/master/zun/common/utils.py
* Retrieve PCI details: http://lists.openstack.org/pipermail/openstack-dev/2017-September/122231.html

Blueprint information

Status:: Complete

Approver:: hongbin

Priority:: High

Drafter:: hongbin

Direction:: Approved

Assignee:: Kien Nguyen

Definition:: New

Series goal:: None

Implementation:: Implemented

Milestone target:: None

Started by: hongbin on 2017-10-25

Completed by: hongbin on 2018-01-11

Related branches

Related bugs

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/use-privsep,n,z

Addressed by: https://review.openstack.org/511430
[WIP] Use privsep

(?)

Work Items

This blueprint contains Public information

Everyone can see this information.

Subscribers

Pritesh Patel