2020-01-13 10:14:17 |
James Page |
bug |
|
|
added bug |
2020-01-13 10:14:43 |
James Page |
bug task added |
|
barbican (Ubuntu) |
|
2020-01-13 10:14:50 |
James Page |
aodh (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:14:52 |
James Page |
aodh (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:15:04 |
James Page |
barbican (Ubuntu): status |
New |
Confirmed |
|
2020-01-13 10:15:06 |
James Page |
barbican (Ubuntu): status |
Confirmed |
Triaged |
|
2020-01-13 10:15:08 |
James Page |
barbican (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:18:40 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec echo chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec echo chmod 0640 "{}" + -o -type d -exec echo chmod 0750 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false |
|
2020-01-13 10:19:30 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false |
|
2020-01-13 10:20:09 |
James Page |
bug task added |
|
cinder (Ubuntu) |
|
2020-01-13 10:20:20 |
James Page |
cinder (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:20:23 |
James Page |
cinder (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:20:56 |
James Page |
bug task added |
|
designate (Ubuntu) |
|
2020-01-13 10:21:01 |
James Page |
designate (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:21:03 |
James Page |
designate (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:21:38 |
James Page |
bug task added |
|
glance (Ubuntu) |
|
2020-01-13 10:21:45 |
James Page |
glance (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:21:46 |
James Page |
glance (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:23:38 |
James Page |
bug task added |
|
gnocchi (Ubuntu) |
|
2020-01-13 10:23:43 |
James Page |
gnocchi (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:23:45 |
James Page |
gnocchi (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:24:14 |
James Page |
bug task added |
|
heat (Ubuntu) |
|
2020-01-13 10:24:37 |
James Page |
bug task added |
|
ironic (Ubuntu) |
|
2020-01-13 10:25:27 |
James Page |
bug task added |
|
keystone (Ubuntu) |
|
2020-01-13 10:26:10 |
James Page |
bug task added |
|
manila (Ubuntu) |
|
2020-01-13 10:26:30 |
James Page |
bug task added |
|
masakari (Ubuntu) |
|
2020-01-13 10:26:46 |
James Page |
bug task added |
|
mistral (Ubuntu) |
|
2020-01-13 10:27:10 |
James Page |
bug task added |
|
nova (Ubuntu) |
|
2020-01-13 10:27:31 |
James Page |
bug task added |
|
octavia (Ubuntu) |
|
2020-01-13 10:27:59 |
James Page |
bug task added |
|
openstack-trove (Ubuntu) |
|
2020-01-13 10:28:18 |
James Page |
bug task added |
|
placement (Ubuntu) |
|
2020-01-13 10:28:29 |
James Page |
bug task added |
|
sahara (Ubuntu) |
|
2020-01-13 10:28:39 |
James Page |
bug task added |
|
swift (Ubuntu) |
|
2020-01-13 10:28:50 |
James Page |
bug task added |
|
senlin (Ubuntu) |
|
2020-01-13 10:28:58 |
James Page |
bug task added |
|
watcher (Ubuntu) |
|
2020-01-13 10:29:29 |
James Page |
bug task added |
|
neutron (Ubuntu) |
|
2020-01-13 10:30:55 |
James Page |
heat (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:30:56 |
James Page |
ironic (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:30:58 |
James Page |
keystone (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:30:59 |
James Page |
manila (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:00 |
James Page |
masakari (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:02 |
James Page |
mistral (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:03 |
James Page |
neutron (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:05 |
James Page |
nova (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:06 |
James Page |
octavia (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:07 |
James Page |
openstack-trove (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:08 |
James Page |
placement (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:09 |
James Page |
sahara (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:11 |
James Page |
senlin (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:12 |
James Page |
swift (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:13 |
James Page |
watcher (Ubuntu): status |
New |
Triaged |
|
2020-01-13 10:31:17 |
James Page |
heat (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:18 |
James Page |
ironic (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:21 |
James Page |
keystone (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:22 |
James Page |
manila (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:23 |
James Page |
masakari (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:24 |
James Page |
mistral (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:25 |
James Page |
neutron (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:27 |
James Page |
nova (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:28 |
James Page |
octavia (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:30 |
James Page |
openstack-trove (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:31 |
James Page |
placement (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:32 |
James Page |
sahara (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:34 |
James Page |
senlin (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:35 |
James Page |
swift (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:31:36 |
James Page |
watcher (Ubuntu): importance |
Undecided |
Medium |
|
2020-01-13 10:32:12 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false and updated if already created:
usermod -s /usr/sbin/nologin <pkg> |
|
2020-01-13 10:34:45 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg>
Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false and updated if already created:
usermod -s /usr/sbin/nologin <pkg> |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg> |
|
2020-03-25 09:43:40 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chown 0750 /var/lib/<pkg> |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg> |
|
2020-03-25 09:44:01 |
James Page |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chmod root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg> |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg> |
|
2020-03-25 18:22:25 |
Launchpad Janitor |
neutron (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-25 21:29:21 |
Launchpad Janitor |
ironic (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-25 21:29:25 |
Launchpad Janitor |
keystone (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-25 22:08:42 |
Launchpad Janitor |
aodh (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-25 23:10:29 |
Corey Bryant |
bug task added |
|
python-glance-store (Ubuntu) |
|
2020-03-25 23:10:48 |
Corey Bryant |
python-glance-store (Ubuntu): status |
New |
Triaged |
|
2020-03-25 23:10:59 |
Corey Bryant |
python-glance-store (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-26 01:34:00 |
Launchpad Janitor |
heat (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 14:24:16 |
James Page |
bug task added |
|
zaqar (Ubuntu) |
|
2020-03-26 14:30:18 |
Corey Bryant |
bug task deleted |
python-glance-store (Ubuntu) |
|
|
2020-03-26 14:35:36 |
Corey Bryant |
bug task added |
|
python-glance-store (Ubuntu) |
|
2020-03-26 14:35:47 |
Corey Bryant |
python-glance-store (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-26 14:35:47 |
Corey Bryant |
python-glance-store (Ubuntu): status |
New |
Triaged |
|
2020-03-26 15:11:49 |
Launchpad Janitor |
placement (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 15:11:50 |
Launchpad Janitor |
openstack-trove (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 15:14:41 |
Launchpad Janitor |
zaqar (Ubuntu): status |
New |
Confirmed |
|
2020-03-26 15:48:19 |
Corey Bryant |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg> |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg>
For keystone, /etc/ files/directories should be owned by keystone:keystone: https://docs.openstack.org/security-guide/identity/checklist.html |
|
2020-03-26 16:14:28 |
Launchpad Janitor |
watcher (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 16:14:30 |
Launchpad Janitor |
designate (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 17:05:53 |
Launchpad Janitor |
barbican (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 17:15:56 |
Launchpad Janitor |
zaqar (Ubuntu): status |
Confirmed |
Fix Released |
|
2020-03-26 19:01:59 |
Corey Bryant |
bug task added |
|
masakari-monitors (Ubuntu) |
|
2020-03-26 19:02:12 |
Corey Bryant |
masakari-monitors (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-26 19:02:12 |
Corey Bryant |
masakari-monitors (Ubuntu): status |
New |
Triaged |
|
2020-03-26 19:03:45 |
Corey Bryant |
bug task added |
|
murano (Ubuntu) |
|
2020-03-26 19:04:00 |
Corey Bryant |
murano (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-26 19:04:00 |
Corey Bryant |
murano (Ubuntu): status |
New |
Triaged |
|
2020-03-26 19:04:13 |
Corey Bryant |
bug task added |
|
murano-agent (Ubuntu) |
|
2020-03-26 19:04:25 |
Corey Bryant |
murano-agent (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-26 19:04:25 |
Corey Bryant |
murano-agent (Ubuntu): status |
New |
Triaged |
|
2020-03-26 19:58:10 |
Launchpad Janitor |
sahara (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 21:46:44 |
Launchpad Janitor |
masakari-monitors (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 22:36:55 |
Launchpad Janitor |
mistral (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 22:36:57 |
Launchpad Janitor |
murano (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-26 22:36:59 |
Launchpad Janitor |
manila (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-27 04:35:33 |
Launchpad Janitor |
python-glance-store (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-27 14:34:09 |
Corey Bryant |
bug task added |
|
magnum (Ubuntu) |
|
2020-03-27 14:35:14 |
Corey Bryant |
magnum (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-27 14:35:14 |
Corey Bryant |
magnum (Ubuntu): status |
New |
Triaged |
|
2020-03-27 15:32:18 |
Corey Bryant |
bug task added |
|
ironic-inspector (Ubuntu) |
|
2020-03-27 15:32:35 |
Corey Bryant |
ironic-inspector (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-27 15:32:35 |
Corey Bryant |
ironic-inspector (Ubuntu): status |
New |
Triaged |
|
2020-03-27 18:12:32 |
Launchpad Janitor |
masakari (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-27 18:17:08 |
Corey Bryant |
bug task added |
|
zvmcloudconnector (Ubuntu) |
|
2020-03-27 18:17:21 |
Corey Bryant |
zvmcloudconnector (Ubuntu): importance |
Undecided |
Medium |
|
2020-03-27 18:17:21 |
Corey Bryant |
zvmcloudconnector (Ubuntu): status |
New |
Triaged |
|
2020-03-27 18:22:41 |
Launchpad Janitor |
magnum (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-27 18:58:44 |
Launchpad Janitor |
gnocchi (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-30 16:22:40 |
Launchpad Janitor |
swift (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-30 17:16:49 |
Launchpad Janitor |
zvmcloudconnector (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-30 21:53:59 |
Launchpad Janitor |
cinder (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-30 23:52:22 |
Launchpad Janitor |
glance (Ubuntu): status |
Triaged |
Fix Released |
|
2020-03-31 15:21:08 |
Launchpad Janitor |
octavia (Ubuntu): status |
Triaged |
Fix Released |
|
2020-04-01 23:45:10 |
Launchpad Janitor |
murano-agent (Ubuntu): status |
Triaged |
Fix Released |
|
2020-04-03 15:24:51 |
Launchpad Janitor |
ironic-inspector (Ubuntu): status |
Triaged |
Fix Released |
|
2020-04-13 19:32:02 |
Corey Bryant |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
chown <pkg>:<pkg> /var/lib/<pkg>
chmod 0750 /var/lib/<pkg>
For keystone, /etc/ files/directories should be owned by keystone:keystone: https://docs.openstack.org/security-guide/identity/checklist.html |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
find /var/lib/<pkg> -exec chown <pkg>:<pkg> "{}" +
find /var/lib/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
For keystone, /etc/ files/directories should be owned by keystone:keystone: https://docs.openstack.org/security-guide/identity/checklist.html |
|
2020-04-17 17:47:05 |
Launchpad Janitor |
nova (Ubuntu): status |
Triaged |
Fix Released |
|
2020-06-02 18:42:57 |
Corey Bryant |
tags |
|
verification-done verification-done-focal |
|
2020-06-02 18:43:17 |
Corey Bryant |
nominated for series |
|
Ubuntu Focal |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
nova (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
swift (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
glance (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
keystone (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
cinder (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
heat (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
designate (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
neutron (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
openstack-trove (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
ironic (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
manila (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
python-glance-store (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
barbican (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
murano-agent (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
murano (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
sahara (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
aodh (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
ironic-inspector (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
zaqar (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
mistral (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
magnum (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
gnocchi (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
senlin (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
watcher (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
placement (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
octavia (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
zvmcloudconnector (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
masakari (Ubuntu Focal) |
|
2020-06-02 18:43:17 |
Corey Bryant |
bug task added |
|
masakari-monitors (Ubuntu Focal) |
|
2020-06-02 18:43:38 |
Corey Bryant |
placement (Ubuntu Focal): status |
New |
Fix Committed |
|
2020-06-02 18:43:48 |
Corey Bryant |
bug task deleted |
aodh (Ubuntu Focal) |
|
|
2020-06-02 18:43:59 |
Corey Bryant |
bug task deleted |
barbican (Ubuntu Focal) |
|
|
2020-06-02 18:44:24 |
Corey Bryant |
bug task deleted |
cinder (Ubuntu Focal) |
|
|
2020-06-02 18:44:27 |
Corey Bryant |
bug task deleted |
glance (Ubuntu Focal) |
|
|
2020-06-02 18:44:28 |
Corey Bryant |
bug task deleted |
designate (Ubuntu Focal) |
|
|
2020-06-02 18:44:30 |
Corey Bryant |
bug task deleted |
gnocchi (Ubuntu Focal) |
|
|
2020-06-02 18:44:31 |
Corey Bryant |
bug task deleted |
heat (Ubuntu Focal) |
|
|
2020-06-02 18:44:34 |
Corey Bryant |
bug task deleted |
ironic (Ubuntu Focal) |
|
|
2020-06-02 18:44:36 |
Corey Bryant |
bug task deleted |
ironic-inspector (Ubuntu Focal) |
|
|
2020-06-02 18:44:37 |
Corey Bryant |
bug task deleted |
keystone (Ubuntu Focal) |
|
|
2020-06-02 18:45:30 |
Corey Bryant |
bug task deleted |
magnum (Ubuntu Focal) |
|
|
2020-06-02 18:45:37 |
Corey Bryant |
bug task deleted |
manila (Ubuntu Focal) |
|
|
2020-06-02 18:45:38 |
Corey Bryant |
bug task deleted |
masakari (Ubuntu Focal) |
|
|
2020-06-02 18:45:42 |
Corey Bryant |
bug task deleted |
masakari-monitors (Ubuntu Focal) |
|
|
2020-06-02 18:45:43 |
Corey Bryant |
bug task deleted |
mistral (Ubuntu Focal) |
|
|
2020-06-02 18:45:47 |
Corey Bryant |
bug task deleted |
murano-agent (Ubuntu Focal) |
|
|
2020-06-02 18:45:49 |
Corey Bryant |
bug task deleted |
murano (Ubuntu Focal) |
|
|
2020-06-02 18:45:50 |
Corey Bryant |
bug task deleted |
neutron (Ubuntu Focal) |
|
|
2020-06-02 18:45:51 |
Corey Bryant |
bug task deleted |
nova (Ubuntu Focal) |
|
|
2020-06-02 18:45:52 |
Corey Bryant |
bug task deleted |
octavia (Ubuntu Focal) |
|
|
2020-06-02 18:45:54 |
Corey Bryant |
bug task deleted |
openstack-trove (Ubuntu Focal) |
|
|
2020-06-02 18:46:46 |
Corey Bryant |
bug task deleted |
python-glance-store (Ubuntu Focal) |
|
|
2020-06-02 18:46:49 |
Corey Bryant |
bug task deleted |
senlin (Ubuntu Focal) |
|
|
2020-06-02 18:46:50 |
Corey Bryant |
bug task deleted |
swift (Ubuntu Focal) |
|
|
2020-06-02 18:46:51 |
Corey Bryant |
bug task deleted |
sahara (Ubuntu Focal) |
|
|
2020-06-02 18:46:52 |
Corey Bryant |
bug task deleted |
watcher (Ubuntu Focal) |
|
|
2020-06-02 18:46:53 |
Corey Bryant |
bug task deleted |
zaqar (Ubuntu Focal) |
|
|
2020-06-02 18:47:02 |
Corey Bryant |
bug task deleted |
zvmcloudconnector (Ubuntu Focal) |
|
|
2020-06-02 18:53:59 |
Corey Bryant |
description |
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
find /var/lib/<pkg> -exec chown <pkg>:<pkg> "{}" +
find /var/lib/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
For keystone, /etc/ files/directories should be owned by keystone:keystone: https://docs.openstack.org/security-guide/identity/checklist.html |
[Impact]
Package should security directories and files as below:
chown <pkg>:adm /var/log/<pkg>
chmod 0750 /var/log/<pkg>
find /etc/<pkg> -exec chown root:<pkg> "{}" +
find /etc/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
# Optional rootwrap.d configuration files.
find /etc/<pkg>/rootwrap.d -exec chown root:root "{}" +
find /etc/<pkg>/rootwrap.d -type f -exec chmod 0644 "{}" + -o -type d -exec chmod 0755 "{}" +
find /var/lib/<pkg> -exec chown <pkg>:<pkg> "{}" +
find /var/lib/<pkg> -type f -exec chmod 0640 "{}" + -o -type d -exec chmod 0750 "{}" +
For keystone, /etc/ files/directories should be owned by keystone:keystone: https://docs.openstack.org/security-guide/identity/checklist.html
[Test Case]
Regression testing via juju deployed openstack + tempest or autopkgtests for uncharmed projects.
[Regression Potential]
Low, the same pattern has been used across all affected openstack packages. The changes landed in focal-proposed packages earlier in the cycle for OpenStack and has received a lot of testing. |
|