openstack/os-brick
Code Issues Proposed changes

Merge "Remove usage of the "VIRTUAL_ENV" environment variable"

Browse Source
This commit is contained in:
Zuul
2025-08-19 17:58:03 +00:00
committed by Gerrit Code Review
parent eaa7bbe7e1 e0460dea1b
commit 35ab78f32c
1 changed files with 1 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
os_brick/privileged/__init__.py
View File

@@ -10,19 +10,11 @@
# License for the specific language governing permissions and limitations
# under the License.
import os
from oslo_privsep import capabilities as c
from oslo_privsep import priv_context
capabilities = [c.CAP_SYS_ADMIN]
# On virtual environments libraries are not owned by the Daemon user (root), so
# the Daemon needs the capability to bypass file read permission checks in
# order to dynamically load the code to run.
if os.environ.get('VIRTUAL_ENV'):
capabilities.append(c.CAP_DAC_READ_SEARCH)
capabilities = [c.CAP_SYS_ADMIN, c.CAP_DAC_READ_SEARCH]
# It is expected that most (if not all) os-brick operations can be
# executed with these privileges.