RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/
Bug 1223328 - Read bit set for others for Openstack services directories in /etc
Summary: Read bit set for others for Openstack services directories in /etc
Keywords:
Status: CLOSED EOL
Alias: None
Product: RDO
Classification: Community
Component: rdo-manager
Version: trunk
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: Kilo
Assignee: Hugh Brock
QA Contact: Shai Revivo
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-05-20 10:52 UTC by Marius Cornea
Modified: 2016-05-19 15:33 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-05-19 15:33:59 UTC
Embargoed:


Attachments (Terms of Use)
openstack dirs permissions (1.06 KB, text/plain)
2015-05-20 10:52 UTC, Marius Cornea
no flags Details

Description Marius Cornea 2015-05-20 10:52:56 UTC
Created attachment 1027623 [details]
openstack dirs permissions

Description of problem:
Cloudforms integration relies on retrieving list of Openstack services configuration files from the overcloud nodes via SSH. Since the read bit for others is not set for most of the Openstack services directories in /etc we are not able to retrieve list of the config files by using a regular system user.  

Version-Release number of selected component (if applicable):
RHEL7.1
instack-0.0.6-1.el7ost.noarch
instack-undercloud-2.1.1-dev14.el7.centos.noarch
openstack-tripleo-puppet-elements-0.0.1-dev63.el7.centos.noarch
tripleo-common-0.0.0-post4.el7.centos.noarch
openstack-tripleo-image-elements-0.9.5-post1.el7.centos.noarch
openstack-tripleo-0.0.6-dev1717.el7.centos.noarch
openstack-tripleo-heat-templates-0.8.6-dev5.el7.centos.noarch

How reproducible:
100%

Steps to Reproduce:
1. Deploy overcloud with rdo-manager according docs 
2. Log in via SSH to overcloud node
3. Check fs permissions for Openstack services directories (e.g. ls -ld /etc/keystone/ )

Actual results:
drwxr-x---. 3 root keystone 4096 May 18 06:19 /etc/keystone/

Expected results:
drwxr-xr--. 3 root keystone 4096 May 18 06:19 /etc/keystone/

Additional info:
I'm attaching a list with the Openstack directories on controller and compute node.

Comment 3 Chandan Kumar 2016-05-19 15:33:59 UTC
This bug is against a Version which has reached End of Life.
If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.


Note You need to log in before you can comment on or make changes to this bug.