Bug 1337178

Summary: incorrect permissions on systemd .service files
Product: Red Hat OpenStack Reporter: Michal Pryc <mpryc>
Component: openstack-novaAssignee: Michal Pryc <mpryc>
Status: CLOSED ERRATA QA Contact: Prasanth Anbalagan <panbalag>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.0 (Liberty)CC: awaugama, berrange, dasmith, dhill, ealcaniz, eglynn, felipe.alfaro, kchamart, mpryc, nlevinki, sbauza, sferdjao, sgordon, sknauss, srevivo, tcarlin, vromanso
Target Milestone: ---Keywords: ZStream
Target Release: 8.0 (Liberty)   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: openstack-nova-12.0.4-2.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1313411 Environment:
RHEL 7 Openstack 8
Last Closed: 2016-07-20 12:35:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1313411, 1337180    
Bug Blocks: 1337177    

Comment 1 Thom Carlin 2016-07-01 15:20:08 UTC
*** Bug 1351729 has been marked as a duplicate of this bug. ***

Comment 3 Prasanth Anbalagan 2016-07-07 15:36:54 UTC
Verified as follows - Permission for nova .service files have been restored to 644 as like the other service files and no error messages were observed in nova logs.

[user@serverA]# yum list installed | grep openstack-nova
openstack-nova-api.noarch             1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-cert.noarch            1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-common.noarch          1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-compute.noarch         1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-conductor.noarch       1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-console.noarch         1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-novncproxy.noarch      1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-scheduler.noarch       1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
[user@serverA]# 
You have mail in /var/spool/mail/root
[user@serverA]# 
[user@serverA]# ls -l /usr/lib/systemd/system/*openstack*service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-alarm-evaluator.service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-alarm-notifier.service
-rw-r--r--. 1 root root 237 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-api.service
-rw-r--r--. 1 root root 276 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-central.service
-rw-r--r--. 1 root root 256 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-collector.service
-rw-r--r--. 1 root root 276 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-compute.service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-notification.service
-rw-r--r--. 1 root root 316 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-polling.service
-rw-r--r--. 1 root root 307 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-api.service
-rw-r--r--. 1 root root 316 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-backup.service
-rw-r--r--. 1 root root 325 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-scheduler.service
-rw-r--r--. 1 root root 316 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-volume.service
-rw-r--r--. 1 root root 261 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-api.service
-rw-r--r--. 1 root root 271 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-registry.service
-rw-r--r--. 1 root root 267 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-scrubber.service
-rw-r--r--. 1 root root 242 Jan 20 20:40 /usr/lib/systemd/system/openstack-keystone.service
-rw-r--r--. 1 root root 571 Jul  7 17:46 /usr/lib/systemd/system/openstack-losetup.service
-rw-r--r--. 1 root root 230 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-api.service
-rw-r--r--. 1 root root 232 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-cert.service
-rw-r--r--. 1 root root 302 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-compute.service
-rw-r--r--. 1 root root 242 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-conductor.service
-rw-r--r--. 1 root root 251 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-consoleauth.service
-rw-r--r--. 1 root root 244 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-console.service
-rw-r--r--. 1 root root 248 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-metadata-api.service
-rw-r--r--. 1 root root 285 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-novncproxy.service
-rw-r--r--. 1 root root 242 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-scheduler.service
-rw-r--r--. 1 root root 197 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-xvpvncproxy.service
-rw-r--r--. 1 root root 286 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-auditor.service
-rw-r--r--. 1 root root 264 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-auditor@.service
-rw-r--r--. 1 root root 247 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-reaper.service
-rw-r--r--. 1 root root 262 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-reaper@.service
-rw-r--r--. 1 root root 322 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-replicator.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-replicator@.service
-rw-r--r--. 1 root root 282 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account.service
-rw-r--r--. 1 root root 297 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account@.service
-rw-r--r--. 1 root root 255 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-auditor.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-auditor@.service
-rw-r--r--. 1 root root 265 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-reconciler.service
-rw-r--r--. 1 root root 328 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-replicator.service
-rw-r--r--. 1 root root 276 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-replicator@.service
-rw-r--r--. 1 root root 288 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container.service
-rw-r--r--. 1 root root 303 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container@.service
-rw-r--r--. 1 root root 255 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-updater.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-updater@.service
-rw-r--r--. 1 root root 283 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-auditor.service
-rw-r--r--. 1 root root 261 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-auditor@.service
-rw-r--r--. 1 root root 247 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-expirer.service
-rw-r--r--. 1 root root 319 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-replicator.service
-rw-r--r--. 1 root root 267 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-replicator@.service
-rw-r--r--. 1 root root 279 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object.service
-rw-r--r--. 1 root root 294 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object@.service
-rw-r--r--. 1 root root 246 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-updater.service
-rw-r--r--. 1 root root 261 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-updater@.service
-rw-r--r--. 1 root root 276 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-proxy.service
[user@serverA]#

Comment 5 errata-xmlrpc 2016-07-20 12:35:33 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1462