Bug 1325781

Summary: Wrong ownership in package prevent munge starting
Product: [Fedora] Fedora EPEL Reporter: Chen Chen <aflyhorse>
Component: mungeAssignee: Steve Traylen <steve.traylen>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: epel7CC: steve.traylen
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-11 08:13:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Chen Chen 2016-04-11 08:02:20 UTC
Description of problem:
/var/log/munge and /var/log/munge/munged.log is owned by munge, preventing munged to start normally.

Version-Release number of selected component (if applicable):
0.5.11.1.el7

How reproducible:
Always

Steps to Reproduce:
1. "yum install munge"
2. run "munged" in foreground

Actual results:
[root@centos7 ~]# munged
munged: Error: Logfile is insecure: "/var/log/munge/munged.log" should be owned by UID 0

Expected results:
munged started

Additional info:

[root@centos7 ~]# rpm -qlv munge | grep /var/log
drwx------    2 munge   munge                       0 May 16  2014 /var/log/munge

Comment 1 Chen Chen 2016-04-11 08:05:30 UTC
[root@centos7 ~]# create-munge-key 
Generating a pseudo-random key using /dev/urandom completed.
[root@centos7 ~]# munged
munged: Error: Pidfile is insecure: invalid ownership of "/run/munge"
munged: Error: PRNG seed dir is insecure: invalid ownership of "/var/lib/munge"
munged: Error: Keyfile is insecure: "/etc/munge/munge.key" should be owned by UID 0

Comment 2 Chen Chen 2016-04-11 08:13:26 UTC
My bad. I should run it under user "munge". Closed.