yahoo-eng-team team mailing list archive

[OpenStack Infra <1862927@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/707368
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=0ef4233d891f8fa42a073901051bf0310f61eebb
Submitter: Zuul
Branch:    master

commit 0ef4233d891f8fa42a073901051bf0310f61eebb
Author: Rodolfo Alonso Hernandez <ralonsoh@xxxxxxxxxx>
Date:   Wed Feb 12 11:43:27 2020 +0000

    Add "ncat" rootwrap filter for debug
    
    In [1], new tests to check "ncat" tool were added. The missing piece
    of this patch was to add a new rootwrap filter to allow to execute
    "ncat" binary as root and inside a namespace.
    
    Closes-Bug: #1862927
    
    [1]https://review.opendev.org/#/q/If8cf47a01dc353734ad07ca6cd4db7bec6c90fb6
    
    Change-Id: I8e8e5cd8c4027cce58c7073002120d14f251463d


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1862927

Title:
  "ncat" rootwrap filter is missing

Status in neutron:
  Fix Released

Bug description:
  "ncat" rootwrap filter is missing, as we can see in [1].

  Log:
  RuntimeError: Process ['ncat', '0.0.0.0', '1234', '-l', '-k'] hasn't been spawned in 20 seconds. Return code: 99, stdout: , sdterr: /home/zuul/src/opendev.org/openstack/neutron/.tox/dsvm-functional/bin/neutron-rootwrap: Unauthorized command: ip netns exec nc-2aefd97b-cf51-4404-804b-b61dc17ce59f ncat 0.0.0.0 1234 -l -k (no filter matched)

  
  [1] https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_b89/701733/28/check/neutron-functional/b89805d/testr_results.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1862927/+subscriptions