Bug 1182331 - [RFE] Updates overwrite important Web server configuration files
Summary: [RFE] Updates overwrite important Web server configuration files
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance
Version: 5.4.0
Hardware: Unspecified
OS: Unspecified
high
low
Target Milestone: GA
: 5.5.0
Assignee: Joe Rafaniello
QA Contact: Dave Johnson
URL:
Whiteboard:
Depends On: 1244937
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-01-14 21:10 UTC by Jared Deubel
Modified: 2019-09-12 08:10 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Feature: Updates overwrite important Web server configuration files Reason: Meet requirement from STIG Result:
Clone Of:
Environment:
Last Closed: 2015-11-03 17:47:35 UTC
Category: ---
Cloudforms Team: ---
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Comment 5 Keenan Brock 2015-04-22 05:50:55 UTC
Would this be fixed by just setting these configuration files to be "configuration files"? (this is my silver bullet)

Comment 6 Joe Rafaniello 2015-04-22 14:09:34 UTC
If we don't need to change core apache settings like we recently changed keepalive, yes.  If we make changes, users/customers would have to migrate to the new config files on each appliance and possibly cause things to be DOA on upgrade.  I'd rather better understand what customers and users would be modifying in the configs and provide a way to externalize these changes in a separate config file that is loaded last.

Comment 8 Joe Rafaniello 2015-11-03 17:47:35 UTC
Closing.  We need to ship our configuration with the rpm as regular files so we can upgrade a complex of appliances without having to visit 10s of appliance to manually diff/apply configuration changes with each version upgrade.

Users could try the solution of storing their changes to the apache configuration in a uniquely named conf file that loads last such as /etc/httpd/conf.d/z_user.conf.  In this way, only this single file would need to be tested with each version upgrade to ensure newer cfme and apache versions still use the same syntax for the changes that the user wanted.


Note You need to log in before you can comment on or make changes to this bug.