Project

General

Profile

Actions

Bug #7644

closed

Permissions of rudder tools are not preserved on relays

Added by Alexis MOUSSET over 5 years ago. Updated over 5 years ago.

Status:
Released
Priority:
N/A
Category:
System techniques
Target version:
Severity:
User visibility:
Effort required:
Priority:

Description

On a CentOS6 relay.


Subtasks 2 (0 open2 closed)

Bug #7696: Missing reporting changes after #7644ReleasedNicolas CHARLES2015-12-28Actions
Bug #7788: Permissions of rudder tools are not preserved on policy servers - Missing change in initial promisesReleasedJonathan CLARKE2016-01-15Actions

Related issues

Related to Rudder - Bug #7679: All the files in /opt/rudder/share/tools should not be executableReleasedBenoît PECCATTE2016-01-13Actions
Actions #1

Updated by Alexis MOUSSET over 5 years ago

On the server:

-rwxr-xr-x. 1 root root     1229 Dec 18 14:04 apache-vhost.tpl
-rwxr-xr-x. 1 root root     1946 Dec 18 14:04 checkroute.pl
-rwxr-xr-x. 1 root root      713 Dec 18 14:04 check-rsyslog-version
-rwxr-xr-x. 1 root root     1083 Dec 18 14:04 checkzmd.pl
-rwxr-xr-x. 1 root root     1024 Dec 18 14:04 check-zypper-version
-rwxr-xr-x. 1 root root     3809 Dec 18 14:04 cpuid-android-V1.0.sh
-rwxr-xr-x. 1 root root     3793 Dec 18 14:04 cpuid-linux-V1.0.sh
-rwxr-xr-x. 1 root root     4617 Dec 18 14:04 cpuid-windows-v1.0.vbs
drwxr-xr-x. 2 root root     4096 Dec 18 14:04 curl
-rwxr-xr-x. 1 root root 12264090 Dec 18 14:04 fusionagent.exe
-rwxr-xr-x. 1 root root      542 Dec 18 14:04 getDate.bat
-rwxr-xr-x. 1 root root   888832 Dec 18 14:04 iconv.dll
-rwxr-xr-x. 1 root root     7680 Dec 18 14:04 iconv.exe
-rwxr-xr-x. 1 root root  3633152 Dec 18 14:04 nxlog-ce-2.8.1248.msi
-rwxr-xr-x. 1 root root     1574 Dec 18 14:04 nxlog.conf
drwxr-xr-x. 2 root root     4096 Dec 18 14:04 openssl
-rwxr-xr-x. 1 root root   397383 Dec 18 14:04 openvpn-2.2.1-1.i686.rpm
-rwxr-xr-x. 1 root root   426212 Dec 18 14:04 openvpn-2.2.1-1.x86_64.rpm
-rwxr-xr-x. 1 root root      683 Dec 18 14:04 registrydns.bat
-rw-------. 1 root root       11 Dec 18 14:05 rudder_tools_updated
-rwxr-xr-x. 1 root root      275 Dec 18 14:04 run-inventory.bat
-rwxr-xr-x. 1 root root     2916 Dec 18 14:04 send-clean.sh
-rwxr-xr-x. 1 root root      316 Dec 18 14:04 userlist.bat
-rwxr-xr-x. 1 root root      345 Dec 18 14:04 uuid.vbs
-rwxr-xr-x. 1 root root      372 Dec 18 14:04 vmware_info.sh
-rwxr-xr-x. 1 root root      592 Dec 18 14:04 zypper-repo.tpl

On the relay:

total 17296
-rwxr-xr-x. 1 root root     1229 Dec 18 14:11 apache-vhost.tpl
-rwxr-xr-x. 1 root root     1946 Dec 18 14:11 checkroute.pl
-rw-------. 1 root root      713 Dec 18 14:15 check-rsyslog-version
-rw-------. 1 root root     1083 Dec 18 14:15 checkzmd.pl
-rw-------. 1 root root     1024 Dec 18 14:15 check-zypper-version
-rw-------. 1 root root     3809 Dec 18 14:15 cpuid-android-V1.0.sh
-rwxr-xr-x. 1 root root     3793 Dec 18 14:11 cpuid-linux-V1.0.sh
-rw-------. 1 root root     4617 Dec 18 14:15 cpuid-windows-v1.0.vbs
drwxr-xr-x. 2 root root     4096 Dec 18 14:15 curl
-rw-------. 1 root root 12264090 Dec 18 14:15 fusionagent.exe
-rw-------. 1 root root      542 Dec 18 14:15 getDate.bat
-rw-------. 1 root root   888832 Dec 18 14:15 iconv.dll
-rw-------. 1 root root     7680 Dec 18 14:15 iconv.exe
-rw-------. 1 root root  3633152 Dec 18 14:15 nxlog-ce-2.8.1248.msi
-rw-------. 1 root root     1574 Dec 18 14:15 nxlog.conf
drwxr-xr-x. 2 root root     4096 Dec 18 14:15 openssl
-rw-------. 1 root root   397383 Dec 18 14:15 openvpn-2.2.1-1.i686.rpm
-rw-------. 1 root root   426212 Dec 18 14:15 openvpn-2.2.1-1.x86_64.rpm
-rw-------. 1 root root      683 Dec 18 14:15 registrydns.bat
-rw-------. 1 root root       11 Dec 18 14:11 rudder_tools_updated
-rw-------. 1 root root      275 Dec 18 14:15 run-inventory.bat
-rwxr-xr-x. 1 root root     2916 Dec 18 14:11 send-clean.sh
-rw-------. 1 root root      316 Dec 18 14:15 userlist.bat
-rw-------. 1 root root      345 Dec 18 14:15 uuid.vbs
-rwxr-xr-x. 1 root root      372 Dec 18 14:11 vmware_info.sh
-rw-------. 1 root root      592 Dec 18 14:15 zypper-repo.tpl

In the rudder-techniques repo on branch 3.2:

-rw-r--r--. 1 amousset amousset 1.3K Dec  8 14:49 apache-vhost.tpl
-rwxr-xr-x. 1 amousset amousset 2.0K Dec  8 14:49 checkroute.pl*
-rwxr-xr-x. 1 amousset amousset  713 Dec  8 14:49 check-rsyslog-version*
-rwxr-xr-x. 1 amousset amousset 1.1K Dec  8 14:49 checkzmd.pl*
-rwxr-xr-x. 1 amousset amousset 1.0K Dec  8 14:49 check-zypper-version*
-rw-r--r--. 1 amousset amousset 3.8K Dec  8 14:49 cpuid-android-V1.0.sh
-rw-r--r--. 1 amousset amousset 3.8K Dec  8 14:49 cpuid-linux-V1.0.sh
-rw-r--r--. 1 amousset amousset 4.6K Dec  8 14:49 cpuid-windows-v1.0.vbs
drwxr-xr-x. 2 amousset amousset 4.0K Dec  8 14:49 curl/
-rw-r--r--. 1 amousset amousset  12M Dec  8 14:49 fusionagent.exe
-rw-r--r--. 1 amousset amousset  542 Dec  8 14:49 getDate.bat
-rw-r--r--. 1 amousset amousset 868K Dec  8 14:49 iconv.dll
-rw-r--r--. 1 amousset amousset 7.5K Dec  8 14:49 iconv.exe
-rw-r--r--. 1 amousset amousset 3.5M Dec  8 14:49 nxlog-ce-2.8.1248.msi
-rw-r--r--. 1 amousset amousset 1.6K Dec  8 14:49 nxlog.conf
drwxr-xr-x. 2 amousset amousset 4.0K Dec  8 14:49 openssl/
-rw-r--r--. 1 amousset amousset 389K Dec  8 14:49 openvpn-2.2.1-1.i686.rpm
-rw-r--r--. 1 amousset amousset 417K Dec  8 14:49 openvpn-2.2.1-1.x86_64.rpm
-rw-r--r--. 1 amousset amousset  683 Dec  8 14:49 registrydns.bat
-rwxr-xr-x. 1 amousset amousset  275 Dec  8 14:49 run-inventory.bat*
-rwxr-xr-x. 1 amousset amousset 2.9K Dec  8 14:49 send-clean.sh*
-rw-r--r--. 1 amousset amousset  316 Dec  8 14:49 userlist.bat
-rw-r--r--. 1 amousset amousset  345 Dec  8 14:49 uuid.vbs
-rwxr-xr-x. 1 amousset amousset  372 Dec  8 14:49 vmware_info.sh*
-rw-r--r--. 1 amousset amousset  592 Dec  8 14:49 zypper-repo.tpl

This is pretty inconsistent.

Actions #2

Updated by Alexis MOUSSET over 5 years ago

On all the agents I get a:

Log system for reports    

Status
None    The file /var/rudder/tools/check-rsyslog-version is missing   
        Logging system for report centralization is already correctly configured                        Error

which seems to be related to this issue.

Actions #3

Updated by Alexis MOUSSET over 5 years ago

  • Assignee set to Alexis MOUSSET
Actions #4

Updated by Alexis MOUSSET over 5 years ago

On the agent:

root@agent1:/home/vagrant# ll /var/rudder/tools/
total 36
-rwxr-xr-x 1 root root 1229 Dec 22 11:30 apache-vhost.tpl
-rwxr-xr-x 1 root root 1946 Dec 22 11:30 checkroute.pl
-rwxr-xr-x 1 root root 3793 Dec 22 11:30 cpuid-linux-V1.0.sh
drwxr-xr-x 2 root root 4096 Dec 22 11:30 curl
drwxr-xr-x 2 root root 4096 Dec 22 11:30 openssl
-rw------- 1 root root   11 Dec 22 11:30 rudder_tools_updated
-rw------- 1 root root   11 Dec 22 11:35 rudder_tools_updated.tmp
-rwxr-xr-x 1 root root 2916 Dec 22 11:30 send-clean.sh
-rwxr-xr-x 1 root root  372 Dec 22 11:30 vmware_info.sh
Actions #5

Updated by Alexis MOUSSET over 5 years ago

  • Related to Bug #7679: All the files in /opt/rudder/share/tools should not be executable added
Actions #6

Updated by Alexis MOUSSET over 5 years ago

  • Subject changed from /var/rudder/tools/check-rsyslog-version is not executable to Permissions of rudder tools are not preserved on relays

The problem is that distributePolicy "conflicts" with the rudder tools updates in common.

Actions #7

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from New to In progress
Actions #8

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis MOUSSET to Nicolas CHARLES
  • Pull Request set to https://github.com/Normation/rudder-techniques/pull/828
Actions #9

Updated by Benoît PECCATTE over 5 years ago

  • Target version changed from 3.2.0~rc1 to 3.2.0~rc2
Actions #10

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from Pending technical review to In progress
  • Assignee changed from Nicolas CHARLES to Alexis MOUSSET
  • Target version changed from 3.2.0~rc2 to 2.11.18
Actions #11

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis MOUSSET to Nicolas CHARLES
  • Pull Request changed from https://github.com/Normation/rudder-techniques/pull/828 to https://github.com/Normation/rudder-techniques/pull/829
Actions #12

Updated by Alexis MOUSSET over 5 years ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100
Actions #14

Updated by Vincent MEMBRÉ over 5 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 2.11.18, 3.0.13, 3.1.6 and 3.2.0 which were released today.

Actions

Also available in: Atom PDF