RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/
Bug 1049362 - openstack-packstack: the glusterFS's default share file is created with writing permissions for root only
Summary: openstack-packstack: the glusterFS's default share file is created with writi...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: RDO
Classification: Community
Component: openstack-packstack
Version: unspecified
Hardware: All
OS: Linux
high
medium
Target Milestone: ---
: ---
Assignee: Ivan Chavero
QA Contact: Ami Jeain
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-01-07 13:21 UTC by Yogev Rabl
Modified: 2014-06-25 19:40 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-04-29 14:31:26 UTC
Embargoed:


Attachments (Terms of Use)

Description Yogev Rabl 2014-01-07 13:21:37 UTC
Description of problem:
The /etc/cinder/shares.conf file created by packstack for the GlusterFS is been created with the following permissions: 
-rw-r--r--. 1 root root 43 Jan  7 11:59 /etc/cinder/shares.conf

according to the manuals the cinder group should have writing permissions on this file as well.


Version-Release number of selected component (if applicable):
openstack-packstack-2013.2.1-0.27.dev936.el6.noarch

How reproducible:
100%

Comment 1 Gilles Dubreuil 2014-03-19 03:22:31 UTC
I don't think that's needed.

We have a working scenario of Cinder with Glusterfs backend where the permissions are: 
-rw-r--r--. 1 root root 60 Oct 11 02:40 /etc/cinder/shares.conf

As long as the file and the path is open for reading by 'others' then there are no reasons why Cinder could not get the shares.

If that confirmed then the cinder group might have to update its manual?.
BTW, Yogev, could you please provide the manuals you're referring to?

Comment 2 Ivan Chavero 2014-04-16 20:08:22 UTC
According to the cinder experts the current privileges are ok. Is this correct Eric Harney?


Note You need to log in before you can comment on or make changes to this bug.