Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1234962

Summary: /etc/puppet/hieradata should not world readable on the undercloud
Product: Red Hat OpenStack Reporter: James Slagle <jslagle>
Component: instack-undercloudAssignee: James Slagle <jslagle>
Status: CLOSED ERRATA QA Contact: Marius Cornea <mcornea>
Severity: unspecified Docs Contact:
Priority: high    
Version: DirectorCC: mburns, ohochman, rhel-osp-director-maint, rrosa
Target Milestone: gaKeywords: Triaged
Target Release: Director   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: instack-undercloud-2.1.2-8.el7ost Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-08-05 13:55:37 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description James Slagle 2015-06-23 15:16:48 UTC
/etc/puppet/hieradata should not world readable on the undercloud

Correct permissions should be 751, but they are actually 755

Comment 3 James Slagle 2015-06-24 20:39:55 UTC
upstream patch: https://review.gerrithub.io/237535

Comment 4 Mike Burns 2015-06-29 22:17:37 UTC
move to on_dev until patch gets merged.

Comment 6 Marius Cornea 2015-07-13 19:05:25 UTC
[root@instack ~]# rpm -qa | grep  instack-undercloud; ls -ld /etc/puppet/hieradata; ls -l /etc/puppet/hieradata

instack-undercloud-2.1.2-17.el7ost.noarch
drwxr-x---. 2 root root 4096 Jul 13 08:10 /etc/puppet/hieradata
total 12
-rw-------. 1 root root 12216 Jul 13 08:10 puppet-stack-config.yaml

Comment 8 errata-xmlrpc 2015-08-05 13:55:37 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1549