Actions
Bug #5246
closed
Bug #5238: CFEngine is unable to run automatically on Rudder Server 2.11.0.rc1 since its generated promises have group writable permissions
Remove group permission on promises after they have been generated
Status:
Released
Priority:
1
Assignee:
Category:
Web - Config management
Target version:
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:
Description
#5238 is not enough to force permission on generated promises, umask set on jetty has still precedence on permissions.
After file are written by rudder, we should run a chmod command to remove permissions on the promises
chmod go-rwx seems good to me
Updated by 
Updated by 
Updated by
Actions