Project

General

Profile

Actions
Copy link

Bug #16136

closed

On relays /var/rudder/share files are not executable for group

Bug #16136: On relays /var/rudder/share files are not executable for group

Added by Félix DALLIDET over 6 years ago. Updated over 6 years ago.

Status:
Released
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Relay server or API
Target version:
5.0.15
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Reviewed
Fix check:
Checked
Regression:

Description

Does not matter for Linux nodes since the agent run as root. For windows nodes, it is apache which does the policy distirbution.
The perms are:

sles-12-64:/var/rudder # ls -l /var/rudder/share
total 0
drwx--S--- 1 root rudder-policy-reader 10  6 nov.  12:35 25af38fb-808a-4173-8df3-439143d78f47

Which prevents the group to execute the files --> i.e. traverse directories.
We should instead chmod 2770 on the files here.

Subtasks 1 (0 open — 1 closed)

Bug #16139: Files distributed via apache but download by the agent on relays have the wrong permissionsReleasedNicolas CHARLESActions

Related issues 1 (0 open — 1 closed)

Related to Rudder - Bug #16907: Slow permissions change of /var/rudder/share during upgradeReleasedNicolas CHARLESActions

Updated by Félix DALLIDET over 6 years ago Actions
Copy link
 #1

  • Category set to Relay server or API

Updated by Félix DALLIDET over 6 years ago Actions
Copy link
 #2

  • Subject changed from On relays, /var/rudder/share files are not executable for group to On relays /var/rudder/share files are not executable for group

Updated by Félix DALLIDET over 6 years ago Actions
Copy link
 #3

  • Status changed from New to In progress
  • Assignee set to Félix DALLIDET

Updated by Félix DALLIDET over 6 years ago Actions
Copy link
 #4

  • Status changed from In progress to Pending technical review
  • Assignee changed from Félix DALLIDET to Alexis Mousset
  • Pull Request set to https://github.com/Normation/rudder-packages/pull/2133

Updated by Félix DALLIDET over 6 years ago Actions
Copy link
 #5

  • Status changed from Pending technical review to Pending release

Updated by Alexis Mousset over 6 years ago Actions
Copy link
 #6

  • Name check changed from To do to Reviewed

Updated by Nicolas CHARLES over 6 years ago Actions
Copy link
 #7

  • Fix check changed from To do to Checked

Updated by Vincent MEMBRÉ over 6 years ago Actions
Copy link
 #8

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 5.0.15 which was released today.

Updated by Benoît PECCATTE about 6 years ago Actions
Copy link
 #9

  • Related to Bug #16907: Slow permissions change of /var/rudder/share during upgrade added
Actions
Copy link

Also available in: PDF Atom