[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: permissions on files/directories



comments inline.

--kr

On Dec 4, 2012, at 12:39 PM, Jhon Honce wrote:

> I followed existing examples for the scripts I added.  Some of the scripts do have path information in them, maybe the idea was to conceal the directory structure on the file system?
> 
> /jwh
> 
> ----- Original Message -----
>> From: "Troy Dawson" <tdawson redhat com>
>> To: dev lists openshift redhat com
>> Cc: "Krishna Raman" <kraman redhat com>
>> Sent: Tuesday, December 4, 2012 1:33:10 PM
>> Subject: permissions on files/directories
>> 
>> Hello,
>> There are several non-standard permissions scattered through
>> openshift
>> origin.  Since these keep coming up whenever I run rpmlint on our
>> packages, and whenever our packages get reviewed before going into
>> Fedora, I'm going to ask why we are doing what we're doing.
>> 
>> ** openshift-origin-node-util
>> 
>> %attr(0750,-,-) %{_sbindir}/oo-accept-node
>> %attr(0750,-,-) %{_sbindir}/oo-admin-ctl-gears
>> %attr(0750,-,-) %{_sbindir}/oo-setup-node

These have to be run as root. So I had made them root-accessable only.
Rest of the scripts im not too sure about.

>> %attr(0750,-,-) %{_sbindir}/oo-app-idle
>> %attr(0750,-,-) %{_sbindir}/oo-autoidler
>> %attr(0750,-,-) %{_sbindir}/oo-idler
>> %attr(0750,-,-) %{_sbindir}/oo-idler-stats
>> %attr(0750,-,-) %{_sbindir}/oo-init-quota
>> %attr(0750,-,-) %{_sbindir}/oo-last-access
>> %attr(0750,-,-) %{_sbindir}/oo-list-stale
>> %attr(0750,-,-) %{_sbindir}/oo-list-access
>> %attr(0750,-,-) %{_sbindir}/oo-restorer
>> %attr(0750,-,apache) %{_sbindir}/oo-restorer-wrapper.sh
>> 
>> 
>> Why are all these scripts not readable via world?
>> (I have ideas about this, but our package reviewer wants to know the
>> reason.  I'd like to give him the reason from whoever originally set
>> the
>> permissions.)
>> 
>> 
>> ** rubygem-openshift-origin-node
>> 
>> %attr(0750,-,-) /etc/httpd/conf.d/openshift
>> (my opinion - should be 0644)
>> 
>> %attr(0750,-,-) /etc/systemd/system
>> (my opinion - should be %attr(0755,-,-) /etc/systemd/system/*)

Im fine the the these changes.

>> 
>> There might be others, those are just the ones I currently have on my
>> plate.
>> 
>> Troy
>> 
>> _______________________________________________
>> dev mailing list
>> dev lists openshift redhat com
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
>> 
> 
> _______________________________________________
> dev mailing list
> dev lists openshift redhat com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/dev



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]