From b179dc03af829443c2e11b4ee1ade456baa00af8 Mon Sep 17 00:00:00 2001

Message-Id: <b179dc03af829443c2e11b4ee1ade456baa00af8.1582885124.git.lorenzo.bianconi@redhat.com>

From: Lorenzo Bianconi <lorenzo.bianconi@redhat.com>

Date: Thu, 27 Feb 2020 11:34:17 +0100

Subject: [PATCH] controller: grant cap_net_admin to ovn-controller

ovn-controller is currently running as non-root so it is not allowed to

configure system networking breaking ovn QoS support. Fix the issue

granting CAP_NET_ADMIN capability to ovn-controller process

Tested-by: Ying Xu <yinxu@redhat.com>

Signed-off-by: Lorenzo Bianconi <lorenzo.bianconi@redhat.com>

Signed-off-by: Mark Michelson <mmichels@redhat.com>

---

 ovn/controller/ovn-controller.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/ovn/controller/ovn-controller.c

+++ b/ovn/controller/ovn-controller.c

@@ -1756,7 +1756,7 @@ main(int argc, char *argv[])

     char *ovs_remote = parse_options(argc, argv);

     fatal_ignore_sigpipe();

-    daemonize_start(false);

+    daemonize_start(true);

     retval = unixctl_server_create(NULL, &unixctl);

     if (retval) {