Bug #20683
closed
Upgrade of dhcpd always breaks permissions
Added by Eric Helms over 7 years ago.
Updated about 7 years ago.
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1477545
We need to set
setfacl -R -m u:theforeman:rwx /etc/dhcp /var/lib/dhcpd
via our puppet installer instead of modifying standard UNIX owner and permissions. Overtime dhcp package is upgraded, RPM returns the original permission and owner which leads to DHCP issues (foreman-proxy is unable to modify files).
We should keep the old UNIX method and add setfacl as additional step, it will not work on filesystems without FACL, in that case skip it.
- Description updated (diff)
setfacl -R -m u:theforeman:rwx /etc/dhcp /var/lib/dhcpd
This should be u:foreman-proxy:rwx. I'm also pretty sure foreman-proxy only reads it (changes happen through omapi) so it can even be rx.
- Project changed from Foreman to Installer
- Status changed from New to Ready For Testing
- Assignee set to Eric Helms
- Pull request https://github.com/theforeman/puppet-foreman_proxy/pull/362 added
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
- Pull request https://github.com/theforeman/puppet-foreman_proxy/pull/377 added
- Related to Bug #21419: Reverse logic of setfacl_etc_dhcp and setfacl_var_lib_dhcp added
Also available in: Atom
PDF