[openstack-nova] remove world-readable bit from /var/log/nova
Pádraig Brady
pbrady at fedoraproject.org
Wed Mar 11 16:58:49 UTC 2015
commit 37218ba220d0a6e484dcee1792b6e9c299ee11fa
Author: Pádraig Brady <P at draigBrady.com>
Date: Wed Mar 11 16:58:34 2015 +0000
remove world-readable bit from /var/log/nova
The nova puppet modules do this anyway,
but the packaging shouldn't rely on that.
Change-Id: I6e50a2a9acc20690ed6f34c32b243e5539f30e9a
openstack-nova.spec | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/openstack-nova.spec b/openstack-nova.spec
index 5373684..b5a017c 100644
--- a/openstack-nova.spec
+++ b/openstack-nova.spec
@@ -6,7 +6,7 @@
Name: openstack-nova
Version: 2014.2.2
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: OpenStack Compute (nova)
Group: Applications/System
@@ -517,7 +517,7 @@ install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/instances
install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/keys
install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/networks
install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/tmp
-install -d -m 755 %{buildroot}%{_localstatedir}/log/nova
+install -d -m 750 %{buildroot}%{_localstatedir}/log/nova
# Setup ghost CA cert
install -d -m 755 %{buildroot}%{_sharedstatedir}/nova/CA
@@ -700,7 +700,7 @@ exit 0
%config(noreplace) %{_sysconfdir}/polkit-1/localauthority/50-local.d/50-nova.pkla
%config(noreplace) %{_sysconfdir}/polkit-1/rules.d/50-nova.rules
-%dir %attr(0755, nova, root) %{_localstatedir}/log/nova
+%dir %attr(0750, nova, root) %{_localstatedir}/log/nova
%dir %attr(0755, nova, root) %{_localstatedir}/run/nova
%{_bindir}/nova-manage
@@ -803,6 +803,9 @@ exit 0
%endif
%changelog
+* Wed Mar 11 2015 Pádraig Brady <pbrady at redhat.com> - 2014.2.2-2
+- remove world-readable bit from /var/log/nova
+
* Wed Feb 11 2015 Alan Pevec <alan.pevec at redhat.com> 2014.2.2-1
- Update to upstream 2014.2.2
More information about the scm-commits
mailing list