Bug 1042131

Summary:	[RFE][oslo]: Support for executing Python code in rootwrap
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	RFEs	Assignee:	RHOS Maint <rhos-maint>
Status:	CLOSED UPSTREAM	QA Contact:
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	markmc, yeylon
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/oslo/+spec/rootwrap-python-exec
Whiteboard:	upstream_milestone_none upstream_status_not-started upstream_definition_approved
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-19 17:31:28 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description RHOS Integration 2013-12-12 21:07:08 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/oslo/+spec/rootwrap-python-exec.

Description:

Support for executing Python code instead of just shell commands
This will increase performance and security for sequences of simple shell commands.

It will also prevent us from having to build more precise filters for dangerous commands (dd, chmod, chown...). The downside is that it might mean abandoning the possibility to use pure "sudo" as a root_wrapper.

Specification URL (additional information):

None