Description of problem: Packstack allinone creates a /var/lib/cinder/cinder-volumes file which is used to host LVM data for Cinder users. This file is created with permissions 644, but should be only readable by root, as it contains user data. (It's only used to back a loopback device, not touched by Cinder itself.) Version-Release number of selected component (if applicable): openstack-packstack-7.0.0-0.8.dev1661.gaf13b7e.el7ost.noarch
Note that openstack-packstack-7.0.0-0.18.dev1702.g490e674.el7ost caused https://bugzilla.redhat.com/show_bug.cgi?id=1344219 . It's going to be reverted until the fix described in that bz is packaged.
Fixed in Puppet modules, proper fix in Packstack was a revert of the previous patch.
*** This bug has been marked as a duplicate of bug 1346048 ***
Tested using: openstack-packstack-7.0.0-0.19.dev1702.g490e674.el7ost.noarch [root@panther13 ~(keystone_admin)]# ls -l /var/lib/cinder/cinder-volumes -rw-r-----. 1 root root 22118662144 Jun 23 10:44 /var/lib/cinder/cinder-volumes
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1354