Project

General

Profile

Actions

Bug #48169

closed

/etc/sudoers.d/ceph-osd-smartctl file permissions don't conform to standards

Added by David Turner over 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
nautilus, octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Ceph is creating this file with 0600 permissions. This causes commands and utilities that rely on the output of `visudo -c` to fail as the defaults for the mode it checks against is 0440.

the default file mode is 0440 (read‐able by owner and group, writable by none). The default mode may be changed via the “sudoers_mode” option to the sudoers Plugin line in the sudo.conf(5) file.

This looks like a quick PR to change the mode from 600 to 440 in a couple places. I've put together a PR showing what I'm assuming the fix for this problem would be.


Related issues 2 (0 open2 closed)

Copied to Ceph - Backport #48283: octopus: /etc/sudoers.d/ceph-osd-smartctl file permissions don't conform to standardsResolvedNathan CutlerActions
Copied to Ceph - Backport #48284: nautilus: /etc/sudoers.d/ceph-osd-smartctl file permissions don't conform to standardsResolvedNathan CutlerActions
Actions #2

Updated by Kefu Chai over 3 years ago

  • Status changed from New to Fix Under Review
  • Assignee set to David Turner
  • Backport set to nautilus, octopus
  • Pull request ID set to 38013
Actions #3

Updated by Kefu Chai over 3 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions #4

Updated by David Turner over 3 years ago

The PR has been merged into master. Just awaiting a backport into Nautilus and Octopus.

Actions #5

Updated by Nathan Cutler over 3 years ago

  • Copied to Backport #48283: octopus: /etc/sudoers.d/ceph-osd-smartctl file permissions don't conform to standards added
Actions #6

Updated by Nathan Cutler over 3 years ago

  • Copied to Backport #48284: nautilus: /etc/sudoers.d/ceph-osd-smartctl file permissions don't conform to standards added
Actions #7

Updated by Nathan Cutler about 3 years ago

  • Status changed from Pending Backport to Resolved

While running with --resolve-parent, the script "backport-create-issue" noticed that all backports of this issue are in status "Resolved" or "Rejected".

Actions

Also available in: Atom PDF