snap-nova-hypervisor/patches/drop-setuid-from-neutron.patch
Corey Bryant e8173abb91 Add patches to drop use of setuid and fchownat
Drop use of setuid and fchownat as they're not covered by any current
plugs and the code isn't required because in strict mode everything runs
as root.

Change-Id: Ic4f0dd6029c869595e35adc343d55e35d50e0d33
2017-06-30 18:45:04 +00:00

23 lines
689 B
Diff

Description: Drop code where neutron drops privileges from root.
This code isn't required because in strict mode we run everything
as root:root and setuid is not allowed by the current plugs.
Author: Corey Bryant <corey.bryant@canonical.com>
Forwarded: no
---
neutron/agent/linux/daemon.py | 1 -
1 file changed, 1 deletion(-)
diff --git a/neutron/agent/linux/daemon.py b/neutron/agent/linux/daemon.py
index 6ad9ee3c8..23218eace 100644
--- a/neutron/agent/linux/daemon.py
+++ b/neutron/agent/linux/daemon.py
@@ -255,4 +255,3 @@ class Daemon(object):
"""
if not self.watch_log:
unwatch_log()
- drop_privileges(self.user, self.group)
--
2.11.0