From 33b05434f3e17f394ec1a39959adcfd46d361e06 Mon Sep 17 00:00:00 2001 From: Javier Pena Date: Wed, 3 Oct 2018 15:16:58 +0200 Subject: [PATCH] Make sure the wsgi script dir mode is 0755 When the system-wide umask setting is more restrictive than the default setting, the wsgi script directory permissions may not allow the apache process to access them, resulting in errors. A similar fix was applied to Keystone some time ago, see [1]. [1] - https://github.com/openstack/puppet-keystone/commit/4f15fb64b1cb60388efbee75acbfb3b13a8fa1f6 Change-Id: Ie9769657dc530bc895a3119b3e458864a8b5f293 --- manifests/wsgi/apache.pp | 1 + spec/defines/openstacklib_wsgi_apache_spec.rb | 1 + 2 files changed, 2 insertions(+) diff --git a/manifests/wsgi/apache.pp b/manifests/wsgi/apache.pp index e5164b8b..a6d31da8 100644 --- a/manifests/wsgi/apache.pp +++ b/manifests/wsgi/apache.pp @@ -252,6 +252,7 @@ define openstacklib::wsgi::apache ( ensure => directory, owner => $user, group => $group, + mode => '0755', } } diff --git a/spec/defines/openstacklib_wsgi_apache_spec.rb b/spec/defines/openstacklib_wsgi_apache_spec.rb index 9425585c..8f4aec73 100644 --- a/spec/defines/openstacklib_wsgi_apache_spec.rb +++ b/spec/defines/openstacklib_wsgi_apache_spec.rb @@ -54,6 +54,7 @@ describe 'openstacklib::wsgi::apache' do 'ensure' => 'directory', 'owner' => 'keystone', 'group' => 'keystone', + 'mode' => '0755', )} it { is_expected.to contain_file('keystone_wsgi').with(