Ofer Schreiber has submitted this change and it was merged.

Change subject: packaging: engine-service: protect configuration files
......................................................................


packaging: engine-service: protect configuration files

we need to protect configuration files as database password resides
within.

for some reason jboss changes the permissions of configuration file and
deployment to 0777, enforcing umask of 0027 perform some remedy at the
price of having logs not world readable as well, so it is not a
solution.

luckily, jboss does not modify the directory in which configuration file
resides, so we split the configuration directory to own directory and
set proper permissions.

Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9
Signed-off-by: Alon Bar-Lev <[email protected]>
---
M packaging/services/ovirt-engine.py
M packaging/services/service.py
2 files changed, 34 insertions(+), 19 deletions(-)

Approvals:
  Alon Bar-Lev: Verified
  Ofer Schreiber: Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/14567
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <[email protected]>
Gerrit-Reviewer: Alon Bar-Lev <[email protected]>
Gerrit-Reviewer: Juan Hernandez <[email protected]>
Gerrit-Reviewer: Ofer Schreiber <[email protected]>
Gerrit-Reviewer: Sandro Bonazzola <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to