Merge "First attempt at adding a privsep user to nova itself."

2017-09-06 21:45:31 +00:00
parent 5c679f375e f535e8bb99
commit aef2396902
13 changed files with 279 additions and 449 deletions
@@ -0,0 +1,9 @@
+---
+security:
+    Privsep transitions. Nova is transitioning from using the older style
+    rootwrap privilege escalation path to the new style Oslo privsep path.
+    This should improve performance and security of Nova in the long term.
+  - |
+    privsep daemons are now started by nova when required. These daemons can
+    be started via rootwrap if required. rootwrap configs therefore need to
+    be updated to include new privsep daemon invocations.
@@ -0,0 +1,5 @@
+---
+upgrade:
+  - |
+    A dac-admin privsep daemon has been added and needs to be included in your
+    rootwrap configuration.