commit e3e0f84c49510afd6da1707bfd9460513a5aee89
Author: Rhys Oxenham <email address hidden>
Date: Thu Oct 12 10:31:42 2017 +0100
Fix /etc/openstack-dashboard/ permissions for access to *policy.json
The Kolla Dockerfile sets the permissions for /etc/openstack-dashboard/
to horizon:horizon. We need this to be readable by the apache user
as the horizon user is not the user in which httpd runs with. We may
want to consider fixing this in the upstream Dockerfile instead, e.g.
checking if we're using centos/rhel and changing the permissions that
way. I'm not sure why it's set to horizon:horizon upstream, and I'm keen
not to break any existing functionality that relies on the horizon based
permissions.
Closes-Bug: #1723125
Change-Id: If5feebae38f7fdfffa60bfaedc4521f676006484
(cherry picked from commit fd657aa4e68de7ad239a88525b5ae343acd3bf80)
Reviewed: https:/ /review. openstack. org/515105 /git.openstack. org/cgit/ openstack/ tripleo- heat-templates/ commit/ ?id=e3e0f84c495 10afd6da1707bfd 9460513a5aee89
Committed: https:/
Submitter: Zuul
Branch: stable/pike
commit e3e0f84c49510af d6da1707bfd9460 513a5aee89
Author: Rhys Oxenham <email address hidden>
Date: Thu Oct 12 10:31:42 2017 +0100
Fix /etc/openstack- dashboard/ permissions for access to *policy.json
The Kolla Dockerfile sets the permissions for /etc/openstack- dashboard/
to horizon:horizon. We need this to be readable by the apache user
as the horizon user is not the user in which httpd runs with. We may
want to consider fixing this in the upstream Dockerfile instead, e.g.
checking if we're using centos/rhel and changing the permissions that
way. I'm not sure why it's set to horizon:horizon upstream, and I'm keen
not to break any existing functionality that relies on the horizon based
permissions.
Closes-Bug: #1723125 fffa60bfaedc452 1f676006484 d239a88525b5ae3 43acd3bf80)
Change-Id: If5feebae38f7fd
(cherry picked from commit fd657aa4e68de7a