Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/

Bug 1223328

Summary: Read bit set for others for Openstack services directories in /etc
Product: [Community] RDO Reporter: Marius Cornea <mcornea>
Component: rdo-managerAssignee: Hugh Brock <hbrock>
Status: CLOSED EOL QA Contact: Shai Revivo <srevivo>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: trunkCC: kmorey, mburns
Target Milestone: ---   
Target Release: Kilo   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-05-19 15:33:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
openstack dirs permissions none

Description Marius Cornea 2015-05-20 10:52:56 UTC
Created attachment 1027623 [details]
openstack dirs permissions

Description of problem:
Cloudforms integration relies on retrieving list of Openstack services configuration files from the overcloud nodes via SSH. Since the read bit for others is not set for most of the Openstack services directories in /etc we are not able to retrieve list of the config files by using a regular system user.  

Version-Release number of selected component (if applicable):
RHEL7.1
instack-0.0.6-1.el7ost.noarch
instack-undercloud-2.1.1-dev14.el7.centos.noarch
openstack-tripleo-puppet-elements-0.0.1-dev63.el7.centos.noarch
tripleo-common-0.0.0-post4.el7.centos.noarch
openstack-tripleo-image-elements-0.9.5-post1.el7.centos.noarch
openstack-tripleo-0.0.6-dev1717.el7.centos.noarch
openstack-tripleo-heat-templates-0.8.6-dev5.el7.centos.noarch

How reproducible:
100%

Steps to Reproduce:
1. Deploy overcloud with rdo-manager according docs 
2. Log in via SSH to overcloud node
3. Check fs permissions for Openstack services directories (e.g. ls -ld /etc/keystone/ )

Actual results:
drwxr-x---. 3 root keystone 4096 May 18 06:19 /etc/keystone/

Expected results:
drwxr-xr--. 3 root keystone 4096 May 18 06:19 /etc/keystone/

Additional info:
I'm attaching a list with the Openstack directories on controller and compute node.

Comment 3 Chandan Kumar 2016-05-19 15:33:59 UTC
This bug is against a Version which has reached End of Life.
If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.