Interestingly the packaging should be trying to make some directory changes:
# 5. adjust file and directory permissions
if ! dpkg-statoverride --list $SERVER_HOME >/dev/null
then
chown $SERVER_USER:$SERVER_GROUP $SERVER_HOME
chmod u=rwx,g=rx,o= $SERVER_HOME
fi
if ! dpkg-statoverride --list /var/log/ceph >/dev/null
then
chown -R $SERVER_USER:$SERVER_GROUP /var/log/ceph
# members of group ceph can log here, but cannot remove
# others' files. non-members cannot read any logs.
chmod u=rwx,g=rwxs,o=t /var/log/ceph
fi
# 6. fix /var/run/ceph
if [ -d /var/run/ceph ]; then
chown $SERVER_USER:$SERVER_GROUP /var/run/ceph
fi
Interestingly the packaging should be trying to make some directory changes:
# 5. adjust file and directory permissions USER:$SERVER_ GROUP $SERVER_HOME USER:$SERVER_ GROUP /var/log/ceph
if ! dpkg-statoverride --list $SERVER_HOME >/dev/null
then
chown $SERVER_
chmod u=rwx,g=rx,o= $SERVER_HOME
fi
if ! dpkg-statoverride --list /var/log/ceph >/dev/null
then
chown -R $SERVER_
# members of group ceph can log here, but cannot remove
# others' files. non-members cannot read any logs.
chmod u=rwx,g=rwxs,o=t /var/log/ceph
fi
# 6. fix /var/run/ceph USER:$SERVER_ GROUP /var/run/ceph
if [ -d /var/run/ceph ]; then
chown $SERVER_
fi