Blob Blame History Raw
From b179dc03af829443c2e11b4ee1ade456baa00af8 Mon Sep 17 00:00:00 2001
Message-Id: <b179dc03af829443c2e11b4ee1ade456baa00af8.1582885124.git.lorenzo.bianconi@redhat.com>
From: Lorenzo Bianconi <lorenzo.bianconi@redhat.com>
Date: Thu, 27 Feb 2020 11:34:17 +0100
Subject: [PATCH] controller: grant cap_net_admin to ovn-controller

ovn-controller is currently running as non-root so it is not allowed to
configure system networking breaking ovn QoS support. Fix the issue
granting CAP_NET_ADMIN capability to ovn-controller process

Tested-by: Ying Xu <yinxu@redhat.com>
Signed-off-by: Lorenzo Bianconi <lorenzo.bianconi@redhat.com>
Signed-off-by: Mark Michelson <mmichels@redhat.com>
---
 ovn/controller/ovn-controller.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/ovn/controller/ovn-controller.c
+++ b/ovn/controller/ovn-controller.c
@@ -1756,7 +1756,7 @@ main(int argc, char *argv[])
     char *ovs_remote = parse_options(argc, argv);
     fatal_ignore_sigpipe();
 
-    daemonize_start(false);
+    daemonize_start(true);
 
     retval = unixctl_server_create(NULL, &unixctl);
     if (retval) {