Bug 1049362

Summary:	openstack-packstack: the glusterFS's default share file is created with writing permissions for root only
Product:	[Community] RDO	Reporter:	Yogev Rabl <yrabl>
Component:	openstack-packstack	Assignee:	Ivan Chavero <ichavero>
Status:	CLOSED NOTABUG	QA Contact:	Ami Jeain <ajeain>
Severity:	medium	Docs Contact:
Priority:	high
Version:	unspecified	CC:	aortega, derekh, eharney, gdubreui, mmagr, yeylon
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-04-29 14:31:26 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Yogev Rabl 2014-01-07 13:21:37 UTC

Description of problem:
The /etc/cinder/shares.conf file created by packstack for the GlusterFS is been created with the following permissions: 
-rw-r--r--. 1 root root 43 Jan  7 11:59 /etc/cinder/shares.conf

according to the manuals the cinder group should have writing permissions on this file as well.


Version-Release number of selected component (if applicable):
openstack-packstack-2013.2.1-0.27.dev936.el6.noarch

How reproducible:
100%

Comment 1 Gilles Dubreuil 2014-03-19 03:22:31 UTC

I don't think that's needed.

We have a working scenario of Cinder with Glusterfs backend where the permissions are: 
-rw-r--r--. 1 root root 60 Oct 11 02:40 /etc/cinder/shares.conf

As long as the file and the path is open for reading by 'others' then there are no reasons why Cinder could not get the shares.

If that confirmed then the cinder group might have to update its manual?.
BTW, Yogev, could you please provide the manuals you're referring to?

Comment 2 Ivan Chavero 2014-04-16 20:08:22 UTC

According to the cinder experts the current privileges are ok. Is this correct Eric Harney?