Bug #5454: Incorrect permissions of deployed file - Rudder - Issue Tracker

Actions

Copy link

Bug #5454

closed

Incorrect permissions of deployed file

Added by Lionel Le Folgoc over 9 years ago. Updated about 7 years ago.

Status:

Rejected

Priority:

N/A

Assignee:

Category:

Techniques

Target version:

Pull Request:

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

Fix check:

Regression:

Description

Hi,

(rudder 2.11.2)

In my git tree:

-rw-r--r-- shared-files/DMS/dms_conffiles/1.0/motd/motd

On the policy server:

 
-rw-r--r-- /var/rudder/configuration-repository/shared-files/DMS/dms_conffiles/1.0/motd/motd

On the relay:

-rw------- /var/rudder/configuration-repository/shared-files/DMS/dms_conffiles/1.0/motd/motd

???
(as a result the permissions on the nodes are wrong, /etc/motd isn't readbale by normal users).

Please don't change permissions behind the user's back.
Thanks.

Actions

Copy link

Updated by Lionel Le Folgoc over 9 years ago

I forgot to write: on all machines, usmask returns 0022, so I've absolutely no idea where this 600 mode comes from.

Actions

Copy link

Updated by Lionel Le Folgoc over 9 years ago

Ping? I'd like to avoid forcing explicitly the permissions of each file when they are correct on the policy server.

The issue seems to lie in techniques/system/common/1.0/update.st:

body copy_from remote(server, path)
{
[...]
        preserve   => "false"; #preserver permissions
[...]
}

Why isn't it true?
Thanks.

Actions

Copy link

Updated by Lionel Le Folgoc over 9 years ago

Same thing with:

body copy_from ncf_remote_cp_method(from, server, method)
{
  servers     => { "${server}" };
  source      => "${from}";
  portnumber  => "${configuration.cfengine_port}";
  compare     => "${method}";
}

There's no preserve option set here.

Actions

Copy link

Updated by Lionel Le Folgoc over 9 years ago

Grrr, from what I'm seeing, it's like that everytime there's a copy (local or remote, same thing). So I guess I can't avoid setting explicitly the permissions of each file. Meh

Okay, feel free to reject this bug report.

Actions

Copy link