openstack/openstack-ansible-os_cinder
Code Issues Proposed changes

Merge "Implementing stricter permissions on config files"

Browse Source
This commit is contained in:
Jenkins 2017-02-08 15:30:31 +00:00 committed by Gerrit Code Review
commit 1ae06d5f3c
3 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -62,6 +62,7 @@ releasenotes/build
# Test temp files # Test temp files
tests/common tests/common
tests/playbooks
tests/*.retry tests/*.retry
# Vagrant artifacts # Vagrant artifacts

6
tasks/cinder_post_install.yml
View File

@ -17,9 +17,9 @@
config_template: config_template:
src: "{{ item.src }}" src: "{{ item.src }}"
dest: "{{ item.dest }}" dest: "{{ item.dest }}"
owner: "{{ item.owner|default(cinder_system_user_name) }}" owner: "root"
group: "{{ item.group|default(cinder_system_group_name) }}" group: "{{ item.group|default(cinder_system_group_name) }}"
mode: "0644" mode: "0640"
config_overrides: "{{ item.config_overrides }}" config_overrides: "{{ item.config_overrides }}"
config_type: "{{ item.config_type }}" config_type: "{{ item.config_type }}"
with_items: with_items:
@ -33,8 +33,6 @@
config_type: "ini" config_type: "ini"
- src: "rootwrap.conf.j2" - src: "rootwrap.conf.j2"
dest: "/etc/cinder/rootwrap.conf" dest: "/etc/cinder/rootwrap.conf"
owner: "root"
group: "root"
config_overrides: "{{ cinder_rootwrap_conf_overrides }}" config_overrides: "{{ cinder_rootwrap_conf_overrides }}"
config_type: "ini" config_type: "ini"
- src: "policy.json.j2" - src: "policy.json.j2"

2
tasks/cinder_pre_install.yml
View File

@ -40,7 +40,7 @@
- { path: "/openstack", mode: "0755", owner: "root", group: "root" } - { path: "/openstack", mode: "0755", owner: "root", group: "root" }
- { path: "/var/cache/cinder", mode: "0700" } - { path: "/var/cache/cinder", mode: "0700" }
- { path: "/etc/cinder", mode: "0750" } - { path: "/etc/cinder", mode: "0750" }
- { path: "/etc/cinder/rootwrap.d", owner: "root", group: "root" } - { path: "/etc/cinder/rootwrap.d", owner: "root", group: "root", mode: "0750" }
- { path: "/etc/sudoers.d", mode: "0750", owner: "root", group: "root" } - { path: "/etc/sudoers.d", mode: "0750", owner: "root", group: "root" }
- { path: "{{ cinder_system_home_folder }}" } - { path: "{{ cinder_system_home_folder }}" }