components/openstack/nova/files/nova.exec_attr
author Andrew Balfour <Andrew.Balfour@Oracle.COM>
Mon, 20 Apr 2015 10:04:29 -0700
changeset 4150 6a2ebd1d6b27
parent 3998 5bd484384122
child 4287 aba3ed31b37a
permissions -rw-r--r--
20899539 rad RBAC changes break nova-compute

OpenStack Compute Management:solaris:cmd:RO::/usr/bin/nova-manage:\
uid=nova;gid=nova

nova-compute:solaris:cmd:RO::/usr/lib/nova/nova-compute:\
privs={file_dac_read}\:/var/log/zones/*

nova-compute:solaris:cmd:RO::/usr/lib/rad/module/mod_zonemgr.so:\
privs={zone}\:/etc/zones/*,{zone}\:/system/volatile/zones/*

nova-compute:solaris:cmd:RO::/usr/sbin/fcinfo:privs=file_dac_read,sys_devices

nova-compute:solaris:cmd:RO::/usr/sbin/iscsiadm:euid=0

nova-compute:solaris:cmd:RO::/usr/sbin/zlogin:uid=0