From: Daniel Gollub <d.gollub@telekom.de>
Date: Wed, 19 Feb 2014 06:37:20 +0000 (+0100)
Subject: Restrict rootwrap find filter for NetAppNFS driver
X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=6af10e84e1a3f1e4673bc2f58142269a2bfeefcf;p=openstack-build%2Fcinder-build.git

Restrict rootwrap find filter for NetAppNFS driver

Additional make the name of the filter unique, so it does not override
any other rule. Like the find rule of the GPFS driver.
Rootwrap is making use of plain python ConfigParser which handles INI files
with key=value pair like fashion. Where the key is unique.

Closes-Bug: 1250101

Change-Id: Id2f193485089e12f00008b38fad2b95a09674ff2
---

diff --git a/etc/cinder/rootwrap.d/volume.filters b/etc/cinder/rootwrap.d/volume.filters
index 1b5ed2320..fe7a28946 100644
--- a/etc/cinder/rootwrap.d/volume.filters
+++ b/etc/cinder/rootwrap.d/volume.filters
@@ -65,7 +65,9 @@ du: CommandFilter, du, root
 truncate: CommandFilter, truncate, root
 chmod: CommandFilter, chmod, root
 rm: CommandFilter, rm, root
-find: CommandFilter, find, root
+
+# cinder/volume/drivers/netapp/nfs.py:
+netapp_nfs_find: RegExpFilter, find, root, find, ^[/]*([^/\0]+(/+)?)*$, -maxdepth, \d+, -name, img-cache.*, -amin, \+\d+
 
 # cinder/volume/drivers/glusterfs.py
 chgrp: CommandFilter, chgrp, root