[openstack-nova] remove world-readable bit from /var/log/nova

Pádraig Brady pbrady at fedoraproject.org
Wed Mar 11 16:58:49 UTC 2015


commit 37218ba220d0a6e484dcee1792b6e9c299ee11fa
Author: Pádraig Brady <P at draigBrady.com>
Date:   Wed Mar 11 16:58:34 2015 +0000

    remove world-readable bit from /var/log/nova
    
    The nova puppet modules do this anyway,
    but the packaging shouldn't rely on that.
    
    Change-Id: I6e50a2a9acc20690ed6f34c32b243e5539f30e9a

 openstack-nova.spec | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/openstack-nova.spec b/openstack-nova.spec
index 5373684..b5a017c 100644
--- a/openstack-nova.spec
+++ b/openstack-nova.spec
@@ -6,7 +6,7 @@
 
 Name:             openstack-nova
 Version:          2014.2.2
-Release:          1%{?dist}
+Release:          2%{?dist}
 Summary:          OpenStack Compute (nova)
 
 Group:            Applications/System
@@ -517,7 +517,7 @@ install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/instances
 install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/keys
 install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/networks
 install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/tmp
-install -d -m 755 %{buildroot}%{_localstatedir}/log/nova
+install -d -m 750 %{buildroot}%{_localstatedir}/log/nova
 
 # Setup ghost CA cert
 install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/CA
@@ -700,7 +700,7 @@ exit 0
 %config(noreplace) %{_sysconfdir}/polkit-1/localauthority/50-local.d/50-nova.pkla
 %config(noreplace) %{_sysconfdir}/polkit-1/rules.d/50-nova.rules
 
-%dir %attr(0755, nova, root) %{_localstatedir}/log/nova
+%dir %attr(0750, nova, root) %{_localstatedir}/log/nova
 %dir %attr(0755, nova, root) %{_localstatedir}/run/nova
 
 %{_bindir}/nova-manage
@@ -803,6 +803,9 @@ exit 0
 %endif
 
 %changelog
+* Wed Mar 11 2015 Pádraig Brady <pbrady at redhat.com> - 2014.2.2-2
+- remove world-readable bit from /var/log/nova
+
 * Wed Feb 11 2015 Alan Pevec <alan.pevec at redhat.com> 2014.2.2-1
 - Update to upstream 2014.2.2
 


More information about the scm-commits mailing list