1337178 – incorrect permissions on systemd .service files

Bug 1337178 - incorrect permissions on systemd .service files

Summary: incorrect permissions on systemd .service files

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-nova
Sub Component:
Version:	8.0 (Liberty)
Hardware:	x86_64
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Target Release:	8.0 (Liberty)
Assignee:	Michal Pryc
QA Contact:	Prasanth Anbalagan
Docs Contact:
URL:
Whiteboard:
Duplicates (1):	1351729 (view as bug list)
Depends On:	1313411 1337180
Blocks:	1337177
TreeView+	depends on / blocked

Reported:	2016-05-18 12:28 UTC by Michal Pryc
Modified:	2019-11-14 08:04 UTC (History)
CC List:	17 users (show)
Fixed In Version:	openstack-nova-12.0.4-2.el7ost
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:	1313411
Environment:	RHEL 7 Openstack 8
Last Closed:	2016-07-20 12:35:33 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Red Hat Bugzilla	1367753	0	unspecified	CLOSED	[RHV] Configuration files are marked executable	2021-02-22 00:41:40 UTC
Red Hat Product Errata	RHBA-2016:1462	0	normal	SHIPPED_LIVE	openstack-nova bug fix advisory	2016-07-20 16:33:17 UTC

Internal Links: 1367753

Comment 1 Thom Carlin 2016-07-01 15:20:08 UTC

*** Bug 1351729 has been marked as a duplicate of this bug. ***

Comment 3 Prasanth Anbalagan 2016-07-07 15:36:54 UTC

Verified as follows - Permission for nova .service files have been restored to 644 as like the other service files and no error messages were observed in nova logs.

[user@serverA]# yum list installed | grep openstack-nova
openstack-nova-api.noarch             1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-cert.noarch            1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-common.noarch          1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-compute.noarch         1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-conductor.noarch       1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-console.noarch         1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-novncproxy.noarch      1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
openstack-nova-scheduler.noarch       1:12.0.4-4.el7ost      @rhelosp-8.0-puddle
[user@serverA]# 
You have mail in /var/spool/mail/root
[user@serverA]# 
[user@serverA]# ls -l /usr/lib/systemd/system/*openstack*service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-alarm-evaluator.service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-alarm-notifier.service
-rw-r--r--. 1 root root 237 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-api.service
-rw-r--r--. 1 root root 276 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-central.service
-rw-r--r--. 1 root root 256 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-collector.service
-rw-r--r--. 1 root root 276 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-compute.service
-rw-r--r--. 1 root root 274 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-notification.service
-rw-r--r--. 1 root root 316 Feb 19 17:36 /usr/lib/systemd/system/openstack-ceilometer-polling.service
-rw-r--r--. 1 root root 307 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-api.service
-rw-r--r--. 1 root root 316 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-backup.service
-rw-r--r--. 1 root root 325 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-scheduler.service
-rw-r--r--. 1 root root 316 Jun  6 17:51 /usr/lib/systemd/system/openstack-cinder-volume.service
-rw-r--r--. 1 root root 261 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-api.service
-rw-r--r--. 1 root root 271 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-registry.service
-rw-r--r--. 1 root root 267 Mar  7 11:21 /usr/lib/systemd/system/openstack-glance-scrubber.service
-rw-r--r--. 1 root root 242 Jan 20 20:40 /usr/lib/systemd/system/openstack-keystone.service
-rw-r--r--. 1 root root 571 Jul  7 17:46 /usr/lib/systemd/system/openstack-losetup.service
-rw-r--r--. 1 root root 230 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-api.service
-rw-r--r--. 1 root root 232 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-cert.service
-rw-r--r--. 1 root root 302 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-compute.service
-rw-r--r--. 1 root root 242 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-conductor.service
-rw-r--r--. 1 root root 251 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-consoleauth.service
-rw-r--r--. 1 root root 244 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-console.service
-rw-r--r--. 1 root root 248 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-metadata-api.service
-rw-r--r--. 1 root root 285 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-novncproxy.service
-rw-r--r--. 1 root root 242 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-scheduler.service
-rw-r--r--. 1 root root 197 Jul  5 13:50 /usr/lib/systemd/system/openstack-nova-xvpvncproxy.service
-rw-r--r--. 1 root root 286 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-auditor.service
-rw-r--r--. 1 root root 264 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-auditor@.service
-rw-r--r--. 1 root root 247 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-reaper.service
-rw-r--r--. 1 root root 262 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-reaper@.service
-rw-r--r--. 1 root root 322 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-replicator.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account-replicator@.service
-rw-r--r--. 1 root root 282 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account.service
-rw-r--r--. 1 root root 297 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-account@.service
-rw-r--r--. 1 root root 255 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-auditor.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-auditor@.service
-rw-r--r--. 1 root root 265 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-reconciler.service
-rw-r--r--. 1 root root 328 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-replicator.service
-rw-r--r--. 1 root root 276 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-replicator@.service
-rw-r--r--. 1 root root 288 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container.service
-rw-r--r--. 1 root root 303 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container@.service
-rw-r--r--. 1 root root 255 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-updater.service
-rw-r--r--. 1 root root 270 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-container-updater@.service
-rw-r--r--. 1 root root 283 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-auditor.service
-rw-r--r--. 1 root root 261 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-auditor@.service
-rw-r--r--. 1 root root 247 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-expirer.service
-rw-r--r--. 1 root root 319 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-replicator.service
-rw-r--r--. 1 root root 267 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-replicator@.service
-rw-r--r--. 1 root root 279 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object.service
-rw-r--r--. 1 root root 294 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object@.service
-rw-r--r--. 1 root root 246 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-updater.service
-rw-r--r--. 1 root root 261 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-object-updater@.service
-rw-r--r--. 1 root root 276 Jan 23 09:57 /usr/lib/systemd/system/openstack-swift-proxy.service
[user@serverA]#

Comment 5 errata-xmlrpc 2016-07-20 12:35:33 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1462

Note You need to log in before you can comment on or make changes to this bug.