Bug 1872562

Summary:	Show motd message only to root/wheel users
Product:	Red Hat Enterprise Linux 8	Reporter:	Martin Pitt <mpitt>
Component:	cockpit	Assignee:	Allison Karlitskaya <allison.karlitskaya>
Status:	CLOSED ERRATA	QA Contact:	Jan Ščotka <jscotka>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	8.3	CC:	gardar.arnarsson, mmarusak, mpitt, sbarcomb
Target Milestone:	rc
Target Release:	8.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 15:06:39 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1861640
Bug Blocks:

Description Martin Pitt 2020-08-26 05:24:07 UTC

Description of problem: It does not make much sense to show the motd message "Do this to enable cockpit" to non-administrators. Event the "go here to access cockpit" message is of questionable value for non-admins, as cockpit doesn't allow you to do much (it may still be useful for monitoring, though).

Change the /run/cockpit/*motd permissions so only root:wheel can read them. This does not actually have an effect with current PAM, that still needs to be fixed -- see bug 1861640.


Version-Release number of selected component (if applicable):

cockpit 225

Comment 3 Martin Pitt 2020-11-11 09:01:36 UTC

Being fixed in https://github.com/cockpit-project/cockpit/pull/14856

Comment 10 errata-xmlrpc 2021-05-18 15:06:39 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (cockpit bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1684

Comment 11 Martin Pitt 2021-08-25 13:50:13 UTC

*** Bug 1996639 has been marked as a duplicate of this bug. ***