DescriptionPradipta Kumar Sahoo
2018-04-11 05:08:43 UTC
Description of problem:
According to compliance, one of our customer wanted to change the UID and GID of OpenStack service users in director based deployment.
As per my understanding If we manually modify the UID & GID, the problem can come when Director installs new RPMS during upgrade/update of OpenStack services. Then you have a collision and packages fail to deploy.
So usually we don't recommend to modify the UID/GID of nay OpenStack service user.
Do we have any documented a list with UIDs / GIDs that should not be changed for OpenStack? WOuld it possible to document it in our official security-hardening guide.
Also, need to understand if customer change other UID/GID (and have some issues, when upgrading/installing RPMs) is the OpenStack instance still supported?
Version-Release number of selected component (if applicable):
Red Hat OpenStack 12
Actual results:
List of UID and GID information not available in our security_and_hardening_guide which customer should not change.
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html/security_and_hardening_guide/
With the implementation of our fully containerized solution the UID and GID of the services is defined by the container build; while configurable in the new paradigm, this is not something we recommend changing. Because the original ask is no longer relevant due containerization, we're closing this RFE. If there's an additional ask targeting our current releases, please open a new RFE containing the new ask.