openstack/tripleo-heat-templates
Code Issues Proposed changes

Set rx permissions for all in /var/lib/config-data

Browse Source 
When using common-container-setup-tasks.yaml after
deployment/unbound/unbound-container-ansible.yaml the permission for
config-data are set to 750 since they are not set explicitely in
common-container-setup-tasks.yaml. This caused problems due to other
users not being able to read anythin below that folder. This changes
sets explicitely the permissions to 755 to avoid these problems.

Change-Id: I54fad8eb65bdcfd5d71a9999f2fb9ff97c143a62
This commit is contained in:
jgilaber 2022-04-07 13:59:47 +02:00
parent ae176c791f
commit 73486ded47
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
common/common-container-setup-tasks.yaml
View File

@ -91,6 +91,7 @@
become: true
file:
path: /var/lib/config-data
mode: 0755
state: directory
setype: container_file_t
selevel: s0