Bug 1818076 - Deploying Cloud Connector keeps receptor.conf world readable
Summary: Deploying Cloud Connector keeps receptor.conf world readable
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: RH Cloud - Inventory
Version: 6.7.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: 6.7.0
Assignee: Adam Ruzicka
QA Contact: Lukáš Hellebrandt
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-03-27 15:41 UTC by Marek Hulan
Modified: 2021-05-24 08:36 UTC (History)
3 users (show)

Fixed In Version: ansiblerole-satellite-receptor-installer-0.6.4
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-04-14 13:38:43 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Marek Hulan 2020-03-27 15:41:19 UTC
Description of problem:

The shipped ansible role for configuring cloud connector keeps the receptor.conf file world readable. That file contains service user password in plaintext and therefore must not be readable.


Version-Release number of selected component (if applicable):

satellite-receptor-installer 0.6.2

How reproducible:

100%

Steps to Reproduce:
1. run Configure Cloud Connector
2. ls -l /etc/receptor/*/receptor.conf
3.

Actual results:

-rw-r--r--


Expected results:

-r---------

Additional info:

Comment 6 Lukáš Hellebrandt 2020-04-06 15:40:58 UTC
Verified with Sat 6.7 snap 20. Receptor configuration file is now created with mod 0400 by receptor installation job.

Comment 7 Bryan Kearney 2020-04-14 13:38:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:1454


Note You need to log in before you can comment on or make changes to this bug.