Description of problem: following deployment and update of the stack, /var/tmp permissions are set to d-wxrwS--t. (which is decimal 1777, not octal 01777) Version-Release number of selected component (if applicable): RHOSP 16.2.3 openstack-tripleo-heat-templates-11.6.1-2.20220409014852.el8ost.noarch How reproducible: keep your RHOSP 16.2 updated Steps to Reproduce: 1. deploy a stack with RHOSP 16.2.2 2. overcloud update to 16.2.3 3. stat /var/tmp on a controller Actual results: Access: (3361/d-wxrwS--t) Expected results: 1777 instead Additional info: noticed in https://review.opendev.org/c/openstack/tripleo-heat-templates/+/788153 deploying with --- openstack-tripleo-heat-templates/deployment/horizon/horizon-container-puppet.yaml 2022-08-10 10:55:41.553687400 +0000 +++ openstack-tripleo-heat-templates/deployment/horizon/horizon-container-puppet.yaml 2022-08-10 10:55:46.509149754 +0000 @@ -382,7 +382,7 @@ path: /var/tmp state: directory setype: tmp_t - mode: 1777 + mode: 01777 update_tasks: - name: Anchor for upgrade and update tasks when: step|int == 0 seems to fix it.
Hello there, Dang... nice catch - "chmod" is doing the right thing, I didn't see the difference while calling via ansible.... A master patch is issued, it will take some time to get it in and then backported down to 16.2 (master -> wallaby -> [17.0] -> train -> [16.2]). Since there wasn't any priority/severity, I set them both to "medium", please feel free to correct them if you need that patch asap. I'll try to make it for 16.2.4. Cheers, C.
this did not break anything on my side (.. so far?) so it's not urgent. also https://docs.ansible.com/ansible/latest/collections/ansible/builtin/file_module.html#parameter-mode mentions the "u+rwx" syntax, which could be less error prone. In any case thanks for your work!
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.4), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:8794