puppet-cinder/releasenotes/notes/Test-volume-permissions-7ca9964fdb8491a2.yaml
Javier Pena a8b991f6be Ensure test volume file permissions are correct
When setting up a test volume, we use dd (usually as root) to create
the file used for a loop mount. Permissions on that file will depend
on the umask, but they should not grant read for all to prevent
information leaks from Cinder volumes to any user.

Change-Id: Ie84650ec13cf746a3bbc99c9f652832c655f182f
2016-06-03 18:06:44 +02:00

6 lines
168 B
YAML

---
security:
- Set the permissions of the file used as backend
for the test volume to 0640, to avoid giving read
permissions to any user on created volumes.