Zero Touch Provisioning changes for subcloud configuration
- Modifying permissions to prevent non-root users from seeing passwords in the /opt/dc/ansible folder Change-Id: I90cad757c116b2d4b8b355c3cfe81d0c4e357138 Story: 2004766 Task: 35756 Signed-off-by: Tyler Smith <tyler.smith@windriver.com>
This commit is contained in:
parent
b7da3417c8
commit
d48c234b1e
@ -158,7 +158,7 @@ cd %{_builddir}/%{pypi_name}-%{version} && oslo-config-generator --config-file .
|
|||||||
install -p -D -m 640 %{_builddir}/%{pypi_name}-%{version}%{_sysconfdir}/dcdbsync/dcdbsync.conf.sample %{buildroot}%{_sysconfdir}/dcdbsync/dcdbsync.conf
|
install -p -D -m 640 %{_builddir}/%{pypi_name}-%{version}%{_sysconfdir}/dcdbsync/dcdbsync.conf.sample %{buildroot}%{_sysconfdir}/dcdbsync/dcdbsync.conf
|
||||||
|
|
||||||
# install ansible overrides dir
|
# install ansible overrides dir
|
||||||
install -d -m 755 ${RPM_BUILD_ROOT}/opt/dc/ansible
|
install -d -m 600 ${RPM_BUILD_ROOT}/opt/dc/ansible
|
||||||
|
|
||||||
%files dcmanager
|
%files dcmanager
|
||||||
%license LICENSE
|
%license LICENSE
|
||||||
@ -176,7 +176,7 @@ install -d -m 755 ${RPM_BUILD_ROOT}/opt/dc/ansible
|
|||||||
%dir %attr(0755,root,root) %{_sysconfdir}/dcmanager
|
%dir %attr(0755,root,root) %{_sysconfdir}/dcmanager
|
||||||
%config(noreplace) %attr(-, root, root) %{_sysconfdir}/dcmanager/dcmanager.conf
|
%config(noreplace) %attr(-, root, root) %{_sysconfdir}/dcmanager/dcmanager.conf
|
||||||
%dir %attr(0755,root,root) /usr/lib/ocf/resource.d/openstack
|
%dir %attr(0755,root,root) /usr/lib/ocf/resource.d/openstack
|
||||||
%dir %attr(0755,root,root) /opt/dc/ansible
|
%dir %attr(0600,root,root) /opt/dc/ansible
|
||||||
%defattr(-,root,root,-)
|
%defattr(-,root,root,-)
|
||||||
/usr/lib/ocf/resource.d/openstack/dcmanager-*
|
/usr/lib/ocf/resource.d/openstack/dcmanager-*
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user