openstack/puppet-swift
Code Issues Proposed changes

Merge "Restrict access to the mount base directory"

Browse Source
This commit is contained in:
Zuul
2022-11-08 12:07:23 +00:00
committed by Gerrit Code Review
parent 6021ccdc39 911919e5a5
commit 0dcd3afa09
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
manifests/storage/disk.pp
View File

@@ -75,8 +75,8 @@ define swift::storage::disk(
if(!defined(File[$mnt_base_dir])) { if(!defined(File[$mnt_base_dir])) {
file { $mnt_base_dir: file { $mnt_base_dir:
ensure => directory, ensure => directory,
owner => $::swift::params::user, owner => 'root',
group => $::swift::params::group, group => 'root',
require => Anchor['swift::config::begin'], require => Anchor['swift::config::begin'],
before => Anchor['swift::config::end'], before => Anchor['swift::config::end'],
} }

4
manifests/storage/loopback.pp
View File

@@ -52,8 +52,8 @@ define swift::storage::loopback(
if(!defined(File[$mnt_base_dir])) { if(!defined(File[$mnt_base_dir])) {
file { $mnt_base_dir: file { $mnt_base_dir:
ensure => directory, ensure => directory,
owner => $::swift::params::user, owner => 'root',
group => $::swift::params::group, group => 'root',
require => Anchor['swift::config::begin'], require => Anchor['swift::config::begin'],
before => Anchor['swift::config::end'], before => Anchor['swift::config::end'],
} }

4
manifests/storage/xfs.pp
View File

@@ -76,8 +76,8 @@ define swift::storage::xfs(
if(!defined(File[$mnt_base_dir])) { if(!defined(File[$mnt_base_dir])) {
file { $mnt_base_dir: file { $mnt_base_dir:
ensure => directory, ensure => directory,
owner => $::swift::params::user, owner => 'root',
group => $::swift::params::group, group => 'root',
require => Anchor['swift::config::begin'], require => Anchor['swift::config::begin'],
before => Anchor['swift::config::end'], before => Anchor['swift::config::end'],
} }