Bug 1042131 - [RFE][oslo]: Support for executing Python code in rootwrap
Summary: [RFE][oslo]: Support for executing Python code in rootwrap
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: RFEs
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: ---
Assignee: RHOS Maint
QA Contact:
URL: https://blueprints.launchpad.net/oslo...
Whiteboard: upstream_milestone_none upstream_stat...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-12 21:07 UTC by RHOS Integration
Modified: 2015-03-19 17:31 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-03-19 17:31:28 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description RHOS Integration 2013-12-12 21:07:08 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/oslo/+spec/rootwrap-python-exec.

Description:

Support for executing Python code instead of just shell commands
This will increase performance and security for sequences of simple shell commands.

It will also prevent us from having to build more precise filters for dangerous commands (dd, chmod, chown...). The downside is that it might mean abandoning the possibility to use pure "sudo" as a root_wrapper.

Specification URL (additional information):

None
Note You need to log in before you can comment on or make changes to this bug.