Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change default log directory permissions #1328

Merged
merged 2 commits into from
Jun 5, 2020

Conversation

jtpalmer
Copy link
Contributor

@jtpalmer jtpalmer commented Jun 4, 2020

Description

Changes the default permissions of the log directory to be 0770.

Motivation and Context

This is intended to improve security.

Tests performed

Tested manually.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • My code follows the code style of this project as found in the CONTRIBUTING document.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

@jtpalmer jtpalmer added the Category:General General label Jun 4, 2020
@jtpalmer jtpalmer added this to the 9.0.0 milestone Jun 4, 2020
@ryanrath ryanrath self-requested a review June 4, 2020 18:12
ryanrath
ryanrath previously approved these changes Jun 4, 2020
@jpwhite4
Copy link
Member

jpwhite4 commented Jun 4, 2020

@jpwhite4
Copy link
Member

jpwhite4 commented Jun 4, 2020

Should we also change the

   chmod 0664 %{_localstatedir}/log/%{name}/$file

in the rpm post section to 660?

plessbd
plessbd previously approved these changes Jun 4, 2020
@jtpalmer
Copy link
Contributor Author

jtpalmer commented Jun 4, 2020

@jpwhite4 I think that makes sense. I'll change it.

@jtpalmer jtpalmer dismissed stale reviews from plessbd and ryanrath via ba618b1 June 4, 2020 18:33
@jtpalmer
Copy link
Contributor Author

jtpalmer commented Jun 4, 2020

We might want to completely remove that block from the post section since it was intended for a specific upgrade when we originally changed those permissions (#355).

@jtpalmer jtpalmer merged commit 6a667cc into ubccr:xdmod9.0 Jun 5, 2020
@jtpalmer jtpalmer deleted the default-log-perms branch June 5, 2020 11:01
@jtpalmer jtpalmer added the enhancement Enhancement of the functionality of an existing feature label Aug 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Category:General General enhancement Enhancement of the functionality of an existing feature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants