Project

General

Profile

Bug #16136

On relays /var/rudder/share files are not executable for group

Added by Félix DALLIDET 7 months ago. Updated 6 months ago.

Status:
Released
Priority:
N/A
Category:
Relay server or API
Target version:
Severity:
User visibility:
Effort required:
Priority:
0

Description

Does not matter for Linux nodes since the agent run as root. For windows nodes, it is apache which does the policy distirbution.
The perms are:

sles-12-64:/var/rudder # ls -l /var/rudder/share
total 0
drwx--S--- 1 root rudder-policy-reader 10  6 nov.  12:35 25af38fb-808a-4173-8df3-439143d78f47

Which prevents the group to execute the files --> i.e. traverse directories.
We should instead chmod 2770 on the files here.


Subtasks

Bug #16139: Files distributed via apache but download by the agent on relays have the wrong permissionsReleasedNicolas CHARLESActions

Related issues

Related to Rudder - Bug #16907: Slow permissions change of /var/rudder/share during upgradeReleasedNicolas CHARLESActions
#1

Updated by Félix DALLIDET 7 months ago

  • Category set to Relay server or API
#2

Updated by Félix DALLIDET 7 months ago

  • Subject changed from On relays, /var/rudder/share files are not executable for group to On relays /var/rudder/share files are not executable for group
#3

Updated by Félix DALLIDET 7 months ago

  • Status changed from New to In progress
  • Assignee set to Félix DALLIDET
#4

Updated by Félix DALLIDET 7 months ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Félix DALLIDET to Alexis MOUSSET
  • Pull Request set to https://github.com/Normation/rudder-packages/pull/2133
#5

Updated by Félix DALLIDET 7 months ago

  • Status changed from Pending technical review to Pending release
#8

Updated by Vincent MEMBRÉ 6 months ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 5.0.15 which was released today.

#9

Updated by Benoît PECCATTE 3 months ago

  • Related to Bug #16907: Slow permissions change of /var/rudder/share during upgrade added

Also available in: Atom PDF