ironic package does not ensure permissions on /var/log/ironic

Bug #1450942 reported by Emilien Macchi
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Cloud Archive
Fix Released
Medium
Unassigned
ironic (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

When installing ironic-common, the post install script will run the dbsync commend as root user.
It will create /var/log/ironic/ironic-dbsync.log (root:root) so it's not consistent with other files in this directory.

Some tools like Puppet use to manage the dbsync with the user of the project (ironic here).

Patch proposed:
- chown ironic:ironic -R /var/lib/ironic /etc/ironic
+ chown ironic:ironic -R /var/lib/ironic /etc/ironic /var/log/ironic

Revision history for this message
James Page (james-page) wrote :

Most other packages run the dbsync as the correct user - in this case ironic.

So we should probably do the same here as well.

Changed in ironic (Ubuntu):
status: New → Triaged
Changed in cloud-archive:
status: New → Triaged
importance: Undecided → Medium
Changed in ironic (Ubuntu):
importance: Undecided → Medium
James Page (james-page)
Changed in ironic (Ubuntu):
status: Triaged → Fix Committed
Changed in cloud-archive:
status: Triaged → Fix Committed
Revision history for this message
James Page (james-page) wrote :

This bug was fixed in the package ironic - 1:6.1.0-0ubuntu3~cloud0
---------------

 ironic (1:6.1.0-0ubuntu3~cloud0) xenial-newton; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 ironic (1:6.1.0-0ubuntu3) yakkety; urgency=medium
 .
   * d/ironic-common.postinst: Ensure dbsync gets run as ironic, avoiding
     log files owned by root user (LP: #1450942).
   * d/control: Fixup typo in 'libaries' (LP: #1451139).

Changed in cloud-archive:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package ironic - 1:6.1.0-0ubuntu3

---------------
ironic (1:6.1.0-0ubuntu3) yakkety; urgency=medium

  * d/ironic-common.postinst: Ensure dbsync gets run as ironic, avoiding
    log files owned by root user (LP: #1450942).
  * d/control: Fixup typo in 'libaries' (LP: #1451139).

 -- James Page <email address hidden> Thu, 08 Sep 2016 12:33:17 +0100

Changed in ironic (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.