kohrar opened a new issue, #8558:
URL: https://github.com/apache/cloudstack/issues/8558

   
   ##### ISSUE TYPE
    * Bug Report
   
   ##### COMPONENT NAME
   ~~~
   UI
   ~~~
   
   ##### CLOUDSTACK VERSION
   ~~~
   4.18.1
   ~~~
   
   ##### CONFIGURATION
   N/A
   
   ##### OS / ENVIRONMENT
   Rocky Linux 8
   
   ##### SUMMARY
   The cloudstack-ui RPM package appears to have restrictive permissions which 
disallows the 'cloud' user from reading asset files.
   
   This is likely a bad umask set during the build/package process.
   
   ##### STEPS TO REPRODUCE
   ~~~
   # cd /tmp
   # wget 
http://download.cloudstack.org/centos/8/4.18/cloudstack-ui-4.18.1.0-1.x86_64.rpm
   # mkdir ui ; cd ui
   # rpm2cpio ../cloudstack-ui-4.18.1.0-1.x86_64.rpm | cpio -idmv
   # ls -al usr/share/cloudstack-ui/
   total 524
   drwxr-xr-x 6 root root    166 Jan 23 11:09 .
   drwxr-xr-x 4 root root     38 Jan 23 11:09 ..
   drw-r--r-- 2 root root    175 Jan 23 11:09 assets
   -rw-r--r-- 1 root root  14318 Sep 14 07:47 cloud.ico
   -rw-r--r-- 1 root root 456512 Sep 14 07:47 color.less
   lrwxrwxrwx 1 root root     30 Sep 14 07:47 config.json -> 
/etc/cloudstack/ui/config.json
   drw-r--r-- 2 root root   8192 Jan 23 11:09 css
   -rw-r--r-- 1 root root   1228 Sep 14 07:47 error.html
   -rw-r--r-- 1 root root   1220 Sep 14 07:47 example.html
   -rw-r--r-- 1 root root  18181 Sep 14 07:47 index.html
   drw-r--r-- 2 root root  16384 Jan 23 11:09 js
   drw-r--r-- 2 root root    309 Jan 23 11:09 locales
   ~~~
   
   Notice that the directories here (assets, css, js, locales) are not world 
executable.
   
   ##### EXPECTED RESULTS
   Directories should be world executable. Otherwise, the 'cloud' user that 
cloudstack-management runs as will be unable to read resources in 
sub-directories, resulting in a 404 error.
   
   ##### WORKAROUND
   Running `chmod o+x` on these directories fixes the 404 errors.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to