Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIXES #37867 - remote_execution_ssh_keys sudoers permissions #10337

Merged
merged 1 commit into from
Oct 16, 2024

Conversation

pafernanr
Copy link
Contributor

Description of problem:
Provision template doesn't assign right file permissions to /etc/sudoers.d/rexuser for non-root users making it unusable. 

How reproducible:
Always

Is this issue a regression from an earlier version:
No

Steps to Reproduce:

  1. Generate the curl registration command using --setup-remote-execution true
  2. Register the Content Host using provided curl command

Actual behavior:
File permissions are invalid:

[root@pafernan-6158cli ~]# ls -l /etc/sudoers.d/                                       
total 4                                                                               
-rw-r--r--. 1 root root 65 Sep 30 17:45 rexuser

Expected behavior:
File permissions are valid

[root@pafernan-6158cli ~]# ls -l /etc/sudoers.d/
total 4
-rw-------. 1 root root 65 Sep 30 18:27 rexuser

Business Impact / Additional info:
Remote execution for non-root users doesn't work

@adamruzicka
Copy link
Contributor

Could you please reword the commit message to be something like Fixes #37867 - Fix remote_execution_ssh_keys sudoers permissions?

@pafernanr pafernanr changed the title FIXES #37867 remote_execution_ssh_keys sudoers permissions FIXES #37867 - remote_execution_ssh_keys sudoers permissions Oct 1, 2024
@pafernanr
Copy link
Contributor Author

pafernanr commented Oct 1, 2024

Sorry, I updated the PR because there were wrong permissions on the first one. 660 instead of 440

@adamruzicka adamruzicka merged commit 477170a into theforeman:develop Oct 16, 2024
52 checks passed
@adamruzicka
Copy link
Contributor

Thank you @pafernanr !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants