bifrost/releasenotes/notes/perm-8b4236c6eddf1f1f.yaml
Dmitry Tantsur 3cb96f1b67 Tighten permissions for PXE directories
Make the HTTP directory not world readable by default.
Images may contain secrets, so regular users should not read them.

Add nginx and dnsmasq to the ironic group so that they can read ironic
files that are group accessible.

Change-Id: Iaa8585fb48e5db6c0d5063dca0d84c9d2300f0c9
2022-01-14 12:56:36 +01:00

6 lines
141 B
YAML

---
fixes:
- |
The TFTP and HTTP directories are no longer world-readable by default.
Set ``boot_folder_permissions`` to override.