OpenStack release manager Thierry Carrez examines OpenStack Nova's current privilege model and how it's being improved with the root_helper option. Right now, OpenStack uses sudo to escalate privileges when it needs to run a root command.
November 28, 2011
Improving How OpenStack Nova Runs Privileged Commands
Read more at ReadWriteCloud