commit b3582e1ae3627bc0a8b35238dddc90647a5f9d89
Author: Lucian Petrut <lpetrut@cloudbasesolutions.com>
Date:   Fri Feb 21 13:21:20 2020 +0200

    Drop invalid rootwrap filters
    
    A recent change introduced a couple of rootwrap filters that are
    supposed to allow running ping within a network namespace.
    
    Those filters will actually replace the "ip" command with "ping",
    which leads to an invalid command.
    
    Since those two filters are now superfluous, we're going to drop
    them.
    
    Change-Id: I57869c68e858503ed8d6b86506c79c289f2820e1
    Closes-Bug: #1864186
    (cherry picked from commit caa34c279756164357bbcb9900aee36d0501d73f)

diff --git a/etc/neutron/rootwrap.d/debug.filters b/etc/neutron/rootwrap.d/debug.filters
index 828d563..fc78f44 100644
--- a/etc/neutron/rootwrap.d/debug.filters
+++ b/etc/neutron/rootwrap.d/debug.filters
@@ -14,8 +14,6 @@
 #   (used by NeutronDebugAgent.ping_all)
 ping: CommandFilter, ping, root
 ping6: CommandFilter, ping6, root
-ping_exec: IpNetnsExecFilter, ping, root
-ping6_exec: IpNetnsExecFilter, ping6, root
 
 # "sleep" command, only for testing
 sleep: RegExpFilter, sleep, root, sleep, \d+