Filippo Giunchedi has submitted this change and it was merged.
Change subject: cassandra: restrict data directory permissions
......................................................................
cassandra: restrict data directory permissions
Bug: T106133
Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
---
M modules/cassandra/manifests/init.pp
1 file changed, 17 insertions(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Verified; Looks good to me, approved
Mobrovac: Looks good to me, but someone else must approve
diff --git a/modules/cassandra/manifests/init.pp
b/modules/cassandra/manifests/init.pp
index f87d7bb..27ad74e 100644
--- a/modules/cassandra/manifests/init.pp
+++ b/modules/cassandra/manifests/init.pp
@@ -307,6 +307,23 @@
ensure => directory,
owner => 'cassandra',
group => 'cassandra',
+ mode => '0750',
+ require => Package['cassandra'],
+ }
+
+ file { $commitlog_directory:
+ ensure => directory,
+ owner => 'cassandra',
+ group => 'cassandra',
+ mode => '0750',
+ require => Package['cassandra'],
+ }
+
+ file { $saved_caches_directory:
+ ensure => directory,
+ owner => 'cassandra',
+ group => 'cassandra',
+ mode => '0750',
require => Package['cassandra'],
}
--
To view, visit https://gerrit.wikimedia.org/r/225300
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Eevans <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: GWicke <[email protected]>
Gerrit-Reviewer: Mobrovac <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
