Rudder

Alexandre Anriot wrote:

Hello,

As seens with François, if the server as Posix ACL with a "default" type like that:

1. file: var/rudder/configuration-repository/.git/objects
2. owner: root
3. group: rudder
4. flags: s
   user::rwx
   group::rwx
   other::r-x
   default:user::rwx
   default:group::r-x
   default:other::r-x

Then on that case, user "ncf-api-venv", belonging to "rudder", does NOT have write rights on Git repos because of "default:group::r-x".

To prevent that case, the installation shoud delete ACL rules with the following command:

setfacl -R -k /var/rudder/

Thanks !

Thanks for the report, Alex. We'll implement this command on initial installation only (then, if a user modifies their ACLs, they can, if they know what they're doing).