System ntpd init script can break crm p_ntp resource

Bug #1431357 reported by Dmitry Tyzhnenko
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Oleksiy Molchanov

Bug Description

init system script /etc/init.d/ntpd is executable(775 permission) after p_ntp resource was created

Anybody can break down ntpd if they using /etc/init.d/ntpd instead of crm_resource

We should disable system init script when we use daemon with crm

For example same logic used when we create p_mysql resource

Tags: puppet
Changed in fuel:
status: New → Confirmed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/163841

Changed in fuel:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/163841
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=55ee496ddf8ee327369dafa66d8896fab5822c38
Submitter: Jenkins
Branch: master

commit 55ee496ddf8ee327369dafa66d8896fab5822c38
Author: Oleksiy Molchanov <email address hidden>
Date: Thu Mar 12 16:17:39 2015 +0200

    Set 0644 mode for ntp and dnsmasq services

    Set 0644 mode for ntp and dnsmasq services, because
    they can potentially break work of corosync resources.
    You cannot start services by using /etc/init.d/ link
    for these services now.

    DocImpact

    Change-Id: I5935f1230e98eddfe4a73d0ce1cb9b5c23df40f5
    Closes-Bug: 1431357

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
Dennis Dmitriev (ddmitriev) wrote :

Verified on Centos and Ubuntu with one controller scenario and three controllers scenario.
Init scripts on controllers are not executable, init scripts on other nodes are executable.

ISO version: {u'build_id': u'2015-03-26_22-54-44', u'ostf_sha': u'a4cf5f218c6aea98105b10c97a4aed8115c15867', u'build_number': u'234', u'auth_required': True, u'nailgun_sha': u'b163f6fc77d6639aaffd9dd992e1ad96951c3bbf', u'production': u'docker', u'api': u'1.0', u'python-fuelclient_sha': u'e5e8389d8d481561a4d7107a99daae07c6ec5177', u'astute_sha': u'3f1ece0318e5e93eaf48802fefabf512ca1dce40', u'fuelmain_sha': u'320b5f46fc1b2798f9e86ed7df51d3bda1686c10', u'feature_groups': [u'mirantis'], u'release': u'6.1', u'release_versions': {u'2014.2-6.1': {u'VERSION': {u'build_id': u'2015-03-26_22-54-44', u'ostf_sha': u'a4cf5f218c6aea98105b10c97a4aed8115c15867', u'build_number': u'234', u'api': u'1.0', u'nailgun_sha': u'b163f6fc77d6639aaffd9dd992e1ad96951c3bbf', u'production': u'docker', u'python-fuelclient_sha': u'e5e8389d8d481561a4d7107a99daae07c6ec5177', u'astute_sha': u'3f1ece0318e5e93eaf48802fefabf512ca1dce40', u'feature_groups': [u'mirantis'], u'release': u'6.1', u'fuelmain_sha': u'320b5f46fc1b2798f9e86ed7df51d3bda1686c10', u'fuellib_sha': u'9c7716bc2ce6075065d7d9dcf96f4c94662c0b56'}}}, u'fuellib_sha': u'9c7716bc2ce6075065d7d9dcf96f4c94662c0b56'}

Changed in fuel:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.