yahoo-eng-team team mailing list archive

[Lucian Petrut <lpetrut@xxxxxxxxxxxxxxxxxxxxxx>]

Public bug reported:

A recent patch[1] updated rootwrap filters so that ping may be used within a network namespace. The issue is that now all ip netns commands get altered, the "ip" command being replaced with "ping":
http://paste.openstack.org/raw/789845/

In particular, this seems to affect the IpNetnsExecFilter filter.

[1] Ie5cbc0dcc76672b26cd2605f08cfd17a30b4c905
[2] https://github.com/openstack/oslo.rootwrap/blob/6.0.0/oslo_rootwrap/filters.py#L71-L75

This seems to be caused by the fact that the executable from the
original command gets replaced with the one from the filter [2]. I can't
tell what's the purpose of that.

** Affects: neutron
     Importance: Undecided
     Assignee: Lucian Petrut (petrutlucian94)
         Status: In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1864186

Title:
  "ping" prepended to ip netns commands

Status in neutron:
  In Progress

Bug description:
  A recent patch[1] updated rootwrap filters so that ping may be used within a network namespace. The issue is that now all ip netns commands get altered, the "ip" command being replaced with "ping":
  http://paste.openstack.org/raw/789845/

  In particular, this seems to affect the IpNetnsExecFilter filter.

  [1] Ie5cbc0dcc76672b26cd2605f08cfd17a30b4c905
  [2] https://github.com/openstack/oslo.rootwrap/blob/6.0.0/oslo_rootwrap/filters.py#L71-L75

  This seems to be caused by the fact that the executable from the
  original command gets replaced with the one from the filter [2]. I
  can't tell what's the purpose of that.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1864186/+subscriptions