Alexandros Kosiaris has uploaded a new change for review.
https://gerrit.wikimedia.org/r/230071
Change subject: service::node: Ensure saner permissions for logdir
......................................................................
service::node: Ensure saner permissions for logdir
There is no reason logdirs to be owned by the group running the service
or having overly open permissions. Set the group to root and permissions
to 0755. logrotate complains about it otherwise. Note that not both are
required to make logrotate happy but it is a good precaution anyway.
Change-Id: If20d70ac17987eb832808eec84efc9f15ad5e02e
---
M modules/service/manifests/node.pp
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/71/230071/1
diff --git a/modules/service/manifests/node.pp
b/modules/service/manifests/node.pp
index 118560b..3a72189 100644
--- a/modules/service/manifests/node.pp
+++ b/modules/service/manifests/node.pp
@@ -126,8 +126,8 @@
file { $local_logdir:
ensure => directory,
owner => $title,
- group => $title,
- mode => '0775',
+ group => 'root',
+ mode => '0755',
before => Service[$title],
}
--
To view, visit https://gerrit.wikimedia.org/r/230071
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: If20d70ac17987eb832808eec84efc9f15ad5e02e
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
