Project

General

Profile

Actions

Bug #2526

closed

ceph-mon $mon_data_dir/keyring is world readable

Added by Anonymous almost 12 years ago. Updated almost 12 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
Development
Tags:
Backport:
stable
Regression:
Severity:
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Keys to the kingdom, for anyone to grab. ceph-mon --mkfs creates this file, it should enforce the access mode.

ubuntu@inst01:~$ ls l /var/lib/ceph/mon/ceph-inst01/keyring
-rw-r--r-
1 root root 77 Jun 7 20:22 /var/lib/ceph/mon/ceph-inst01/keyring

Actions #1

Updated by Sage Weil almost 12 years ago

  • Status changed from New to Resolved
  • Backport set to stable
Actions

Also available in: Atom PDF