Bug #16136
closed
On relays /var/rudder/share files are not executable for group
Added by Félix DALLIDET about 5 years ago.
Updated almost 5 years ago.
Category:
Relay server or API
Description
Does not matter for Linux nodes since the agent run as root. For windows nodes, it is apache which does the policy distirbution.
The perms are:
sles-12-64:/var/rudder # ls -l /var/rudder/share
total 0
drwx--S--- 1 root rudder-policy-reader 10 6 nov. 12:35 25af38fb-808a-4173-8df3-439143d78f47
Which prevents the group to execute the files --> i.e. traverse directories.
We should instead chmod 2770 on the files here.
- Category set to Relay server or API
- Subject changed from On relays, /var/rudder/share files are not executable for group to On relays /var/rudder/share files are not executable for group
- Status changed from New to In progress
- Assignee set to Félix DALLIDET
- Status changed from In progress to Pending technical review
- Assignee changed from Félix DALLIDET to Alexis Mousset
- Pull Request set to https://github.com/Normation/rudder-packages/pull/2133
- Status changed from Pending technical review to Pending release
- Name check changed from To do to Reviewed
- Fix check changed from To do to Checked
- Status changed from Pending release to Released
This bug has been fixed in Rudder 5.0.15 which was released today.
- Related to Bug #16907: Slow permissions change of /var/rudder/share during upgrade added
Also available in: Atom
PDF