OpenStack Dashboard Charm

  1. Bug #1755027
  2. Comment #3

Comment 3 for bug 1755027

Revision history for this message
Corey Bryant (corey.bryant) wrote : Re: local_settings.py is world readable and contains passwords

I've confirmed this is not a package bug.

The postinst package script has:

  if [ -f /etc/openstack-dashboard/local_settings.py ]; then
    chown root:horizon /etc/openstack-dashboard/local_settings.py
    chmod 0640 /etc/openstack-dashboard/local_settings.py
  fi

And a xenial-pike install of openstack-dashboard has:

root@x1:~# ls -al /etc/openstack-dashboard/local_settings.py
-rw-r----- 1 root horizon 34432 Dec 1 13:16 /etc/openstack-dashboard/local_settings.py

I'll focus on the charm now.