From be5ff167d9e9a44a376939148bf557530d74288b Mon Sep 17 00:00:00 2001
From: Thomas Bachman <tbachman@yahoo.com>
Date: Fri, 13 Feb 2026 13:46:44 +0000
Subject: [PATCH] Add netstat to rootwrap filters

Container privileges have removed the abiltiy of the neutron user
to run netstat commands. This patch adds netstat to the list of
rootwrap filters (used by the opflex-agent's supervisord to
monitor connections with peers).
---
 etc/cisco-apic.filters | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/etc/cisco-apic.filters b/etc/cisco-apic.filters
index 6a4eb7a..4612b36 100644
--- a/etc/cisco-apic.filters
+++ b/etc/cisco-apic.filters
@@ -18,3 +18,6 @@ ovsdb-client: CommandFilter, ovsdb-client, root
 
 # nft filters
 nft: CommandFilter, nft, root
+
+# netstat filters
+netstat: CommandFilter, netstat, root