OpenStack release manager Thierry Carrez examines OpenStack Nova’s current privilege model and how it’s being improved with the root_helper option. Right now, OpenStack uses sudo to escalate privileges when it needs to run a root command.