Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=train-eol 2017-05-27T04:40:31+00:00 2017-05-27T04:40:31+00:00 Steven Dake stdake@cisco.com 2017-05-27T04:33:17+00:00 urn:sha1:4607ab5e530310c9f3b5bf35490c40d087340d07 set_configs.py has logic to handle chown of directories. Simplify the codebase by removing these unnessary chowns. Further the chowns cause some forms of NFS backed storage to not work properly. Change-Id: I8df95d06b1010778deb3e2a3065aaab26ed2eb6a Closes-Bug: #1693973 2015-11-12T08:12:40+00:00 Steven Dake stdake@cisco.com 2015-11-10T09:11:20+00:00 urn:sha1:4c9e15b94e3f8e27a3ef194768c64357efa9ea82 Drop root privileges for mariadb. This isn't perfect. If somemone breaks out of the container and can run sudo within the contianer, it would be possible to replace the root credentials of the database. Any container that uses sudo suffers from some extra attack vector related to the sudo command. That said, the sudo commands are locked down to minimize harm. Change-Id: I4b3573725d940bb8aa90d43a6235d8cf7d30fc64 Partially-Implements: blueprint drop-root