yahoo-eng-team team mailing list archive

[Adam Gandelman <1178419@xxxxxxxxxxxxxxxxxx>]

** Changed in: quantum/grizzly
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to quantum.
https://bugs.launchpad.net/bugs/1178419

Title:
  L3 & DHCP agents can't kill metadata proxy on RHEL

Status in OpenStack Quantum (virtual network service):
  Fix Released
Status in quantum grizzly series:
  Fix Released

Bug description:
  The KillFilter used by the dhcp and l3 agent rootwrap filters checks
  the executable linked to by /proc/[pid]/exe, and will only allow the
  process to be killed if the process's executable matches that defined
  for the filter.  The metadata proxy defaults to running with
  /usr/bin/python, which results in a different executable being
  identified for the process depending on the distro:

  - on Ubuntu, /usr/bin/python is a symlink, so the versioned executable
  will be identified as the process's executable.

  - on RHEL, /usr/bin/python is not a symlink, and will be identified as
  the process's executable

  Currently, the agents cannot kill the metadata proxy on RHEL due to
  the lack of a compatible filter.

To manage notifications about this bug go to:
https://bugs.launchpad.net/quantum/+bug/1178419/+subscriptions