Bug 682692

Summary:	database.yml shouldn't be readable by all
Product:	[Retired] CloudForms Cloud Engine	Reporter:	Jan Provaznik <jprovazn>
Component:	aeolus-conductor	Assignee:	Mo Morsi <mmorsi>
Status:	CLOSED CURRENTRELEASE	QA Contact:	wes hayutin <whayutin>
Severity:	high	Docs Contact:
Priority:	high
Version:	0.3.1	CC:	deltacloud-maint
Target Milestone:	rc	Keywords:	Reopened
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-12-08 13:47:18 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	684278

Description Jan Provaznik 2011-03-07 10:01:21 UTC

Description of problem:
I can see database config as ordinary user:
$ ls -l /etc/aeolus-conductor/database.yml
-rw-r--r--. 1 root root 1699 Mar  4 12:50 /etc/aeolus-conductor/database.yml

Version-Release number of selected component (if applicable):
aeolus-conductor-0.0.3-0.fc14.x86_64

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 wes hayutin 2011-03-11 16:58:47 UTC

adding to the ce-beta blocking tracker

Comment 2 wes hayutin 2011-03-16 15:33:32 UTC

aeolus-conductor-debuginfo-0.0.3-0.fc1420110311212550gitab7a7ba.x86_64
aeolus-conductor-doc-0.0.3-0.fc1420110311212550gitab7a7ba.x86_64
aeolus-conductor-daemons-0.0.3-0.fc1420110311212550gitab7a7ba.x86_64
aeolus-conductor-0.0.3-0.fc1420110311212550gitab7a7ba.x86_64
aeolus-configure-2.0.0-4.fc1420110311170652gite6ac5c7.noarch
[root@dell-pe2900-01 ~]# ls -l /etc/aeolus-conductor/database.yml
-rw-r--r--. 1 root root 1651 Mar 11 17:45 /etc/aeolus-conductor/database.yml

Comment 3 Mo Morsi 2011-03-31 20:59:18 UTC

Patch fixing this pushed to conductor

http://git.fedorahosted.org/git/?p=aeolus/conductor.git;a=commitdiff;h=ba5d50bd74c71554692e83bed7160105d9c860a4

Comment 4 wes hayutin 2011-04-01 01:53:40 UTC

There has not been a release of CE, you cant close the bug.  Moving back to verified.

Comment 5 wes hayutin 2011-08-01 19:53:28 UTC

release pending...

Comment 6 wes hayutin 2011-08-01 19:55:39 UTC

release pending...

Comment 8 wes hayutin 2011-12-08 13:47:18 UTC

perm close