components/openstack/cinder/files/cinder.prof_attr
author David Hollister <david.hollister@oracle.com>
Wed, 12 Oct 2016 14:01:13 -0600
changeset 7094 61352b4e5af5
parent 3998 5bd484384122
permissions -rw-r--r--
24797203 OpenStack RBAC profiles allow reading too many files 24797238 keystone RBAC and SMF should point at Apache log files 24797256 cinder RBAC and SMF should point at Apache log files 24830959 horizon RBAC and SMF should point at Apache log files
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
1760
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
     1
OpenStack Block Storage Management:RO::\
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
     2
Manage OpenStack Cinder:\
3998
5bd484384122 PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents: 1944
diff changeset
     3
auths=solaris.admin.edit/etc/cinder/*.conf,\
5bd484384122 PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents: 1944
diff changeset
     4
solaris.admin.edit/etc/cinder/*.ini,\
5bd484384122 PSARC 2015/110 OpenStack service updates for Juno
Danek Duvall <danek.duvall@oracle.com>
parents: 1944
diff changeset
     5
solaris.admin.edit/etc/cinder/*.json,\
1760
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
     6
solaris.smf.manage.cinder,\
1944
56ac2df1785b PSARC/2014/207 OpenStack Glance Update to Havana
Drew Fisher <drew.fisher@oracle.com>
parents: 1760
diff changeset
     7
solaris.smf.value.cinder;\
7094
61352b4e5af5 24797203 OpenStack RBAC profiles allow reading too many files
David Hollister <david.hollister@oracle.com>
parents: 3998
diff changeset
     8
defaultpriv={file_dac_search}\:/var/log/cinder,\
61352b4e5af5 24797203 OpenStack RBAC profiles allow reading too many files
David Hollister <david.hollister@oracle.com>
parents: 3998
diff changeset
     9
{file_dac_read}\:/var/log/cinder/*,\
61352b4e5af5 24797203 OpenStack RBAC profiles allow reading too many files
David Hollister <david.hollister@oracle.com>
parents: 3998
diff changeset
    10
{file_dac_read}\:/var/svc/log/application-openstack-cinder-*
1760
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    11
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    12
OpenStack Management:RO:::profiles=OpenStack Block Storage Management
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    13
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    14
cinder-volume:RO::\
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    15
Do not assign to users. \
353323c7bdc1 PSARC/2013/350 OpenStack for Solaris (Umbrella)
Drew Fisher <drew.fisher@oracle.com>
parents:
diff changeset
    16
Commands required for application/openstack/cinder/cinder-volume: