Project

General

Profile

Fix #11694

ceph-deploy admin command pushes the client.admin key with world readable permissions

Added by Kenneth Waegeman over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Immediate
Assignee:
Target version:
Start date:
05/21/2015
Due date:
% Done:

0%

Source:
Community (user)
Tags:
Backport:
1.5.22
Reviewed:
Affected Versions:
ceph-qa-suite:

Description

Hi,
when using the 'ceph-deploy admin' command, the /etc/ceph/ceph.client.admin.keyring on the host is world-readable, and thus making it usable for all local users..
rw-r--r- 1 root root 63 May 19 15:39 ceph.client.admin.keyring
(tested with 1.5.23)

History

#1 Updated by Travis Rhoden over 3 years ago

  • Tracker changed from Bug to Fix
  • Status changed from New to Verified
  • Affected Versions 1.5.24 added

Confirmed on 1.5.24 as well.

#3 Updated by Travis Rhoden over 3 years ago

  • Status changed from Verified to Need Review
  • Assignee set to Travis Rhoden
  • Priority changed from Normal to Immediate
  • Target version set to 1.5.25
  • Backport set to 1.5.22

#4 Updated by Travis Rhoden over 3 years ago

  • Status changed from Need Review to Resolved

PR merged. Will go into 1.5.25. Also backported to 1.5.22-stable branch, for use by downstream products that shipped with 1.5.22.

Also available in: Atom PDF