Project

General

Profile

Bug #30176

Ensure 0640 file modes in foreman-proxy config files

Added by Ewoud Kohl van Wijngaarden 4 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Category:
RPMs
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

Currently the installer sets settings.yml and settings.d/*.yml to foreman_proxy:foreman_proxy with mode 0640 since some files contain secrets. Packaging sets them to root:root with 0644.

This causes inconsistency creates problems. rpm -qV now has mismatches on these properties. It also causes the installer to change them and restart the foreman-proxy service, even if nothing changed.

Associated revisions

Revision 024d0a3d (diff)
Added by Ewoud Kohl van Wijngaarden 4 months ago

Fixes #30176 - Set foreman-proxy file owner + mode

Currently the installer sets settings.yml and settings.d/*.yml to
foreman_proxy:foreman_proxy with mode 0640 since some files contain
secrets. Packaging sets them to root:root with 0644.

This causes inconsistency creates problems. rpm -qV now has mismatches
on these properties. It also causes the installer to change them and
restart the foreman-proxy service, even if nothing changed.

History

#1 Updated by The Foreman Bot 4 months ago

  • Assignee set to Ewoud Kohl van Wijngaarden
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-packaging/pull/5449 added

#2 Updated by The Foreman Bot 4 months ago

  • Fixed in Releases 2.2.0 added

#3 Updated by Ewoud Kohl van Wijngaarden 4 months ago

  • Status changed from Ready For Testing to Closed

#4 Updated by The Foreman Bot 4 months ago

  • Pull request https://github.com/theforeman/foreman-packaging/pull/5469 added

#5 Updated by Ewoud Kohl van Wijngaarden 4 months ago

  • Triaged changed from No to Yes
  • Target version set to 2.2.0
  • Pull request deleted (https://github.com/theforeman/foreman-packaging/pull/5469)

Also available in: Atom PDF