URL: https://github.com/freeipa/freeipa/pull/1092 Author: stlaz Title: #1092: [Backport][ipa-4-6] Fall back to using configuration to determine server config status Action: opened
PR body: """ This PR was opened automatically because PR #1084 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1092/head:pr1092 git checkout pr1092
From 76b6d13f28f0ac43f9d2ad722c841067109ee5cd Mon Sep 17 00:00:00 2001 From: Rob Crittenden <rcrit...@redhat.com> Date: Mon, 18 Sep 2017 11:31:45 -0400 Subject: [PATCH] Add exec to /var/lib/ipa/sysrestore for install status inquiries installutils.is_ipa_configured() previously required root privileges to see whether there were sysrestore or filestore files. The directory was mode 0700 so this function always returned False for non-root users. Relaxing permissions is is needed to run the tests as the jenkins user. Backed-up files retain their original FS permissions so this shouldn't disclose any previously unreadable backed-up configuration. https://pagure.io/freeipa/issue/7157 --- freeipa.spec.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 638886af31..811532ff8a 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -1467,7 +1467,7 @@ fi %dir %{_localstatedir}/lib/ipa %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/backup %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/gssproxy -%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore +%attr(711,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysupgrade %attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca %ghost %{_localstatedir}/lib/ipa/pki-ca/publish
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
