openstack
/
keystone
Code Issues Proposed changes

Run WSGI with group=keystone 

This matches puppet-keystone[*] and is required for distributions
which properly restricted access to /etc/keystone

[*] https://github.com/stackforge/puppet-keystone/blob/master/manifests/wsgi/apache.pp#L167

Closes-Bug: #1456441

Change-Id: I7a80bdf1c1efaedfeba7d2834a858e3617f6529e
This commit is contained in:
Alan Pevec 2015-06-03 00:36:43 +02:00 committed by Dolph Mathews
parent 386054847e
commit 0058b6e64f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
httpd/wsgi-keystone.conf
View File

@ -2,7 +2,7 @@ Listen 5000
Listen 35357
<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone display-name=%{GROUP}
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /var/www/cgi-bin/keystone/main
WSGIApplicationGroup %{GLOBAL}
@ -15,7 +15,7 @@ Listen 35357
</VirtualHost>
<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone display-name=%{GROUP}
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
WSGIApplicationGroup %{GLOBAL}