Ottomata has submitted this change and it was merged.
Change subject: Restrict access to geowiki's data-private checkout
......................................................................
Restrict access to geowiki's data-private checkout
Only $geowiki_user and www-data require access. The data is generated
by the $geowiki_user, and is served through the www-data user.
Card: analytics 1239
Card: analytics 1240
Change-Id: I94729b9420acf4b54e1d37f2b524c800e0c81eea
---
M manifests/misc/statistics.pp
1 file changed, 2 insertions(+), 1 deletion(-)
Approvals:
Ottomata: Verified; Looks good to me, approved
diff --git a/manifests/misc/statistics.pp b/manifests/misc/statistics.pp
index c579f7a..19a5aa6 100644
--- a/manifests/misc/statistics.pp
+++ b/manifests/misc/statistics.pp
@@ -913,7 +913,8 @@
origin => "file://${geowiki_private_data_bare_path}",
ensure => 'latest',
owner => $geowiki_user,
- group => $geowiki_user,
+ group => 'www-data',
+ mode => 0750,
}
}
--
To view, visit https://gerrit.wikimedia.org/r/94625
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I94729b9420acf4b54e1d37f2b524c800e0c81eea
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: QChris <[email protected]>
Gerrit-Reviewer: Ottomata <[email protected]>
Gerrit-Reviewer: jenkins-bot
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
