Ofer Schreiber has submitted this change and it was merged. Change subject: packaging: engine-service: protect configuration files ...................................................................... packaging: engine-service: protect configuration files we need to protect configuration files as database password resides within. for some reason jboss changes the permissions of configuration file and deployment to 0777, enforcing umask of 0027 perform some remedy at the price of having logs not world readable as well, so it is not a solution. luckily, jboss does not modify the directory in which configuration file resides, so we split the configuration directory to own directory and set proper permissions. Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9 Signed-off-by: Alon Bar-Lev <alonbl(a)redhat.com&gt; --- M packaging/services/ovirt-engine.py M packaging/services/service.py 2 files changed, 34 insertions(+), 19 deletions(-) Approvals: Alon Bar-Lev: Verified Ofer Schreiber: Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/14567 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9 Gerrit-PatchSet: 3 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Alon Bar-Lev <alonbl(a)redhat.com&gt; Gerrit-Reviewer: Alon Bar-Lev <alonbl(a)redhat.com&gt; Gerrit-Reviewer: Juan Hernandez <juan.hernandez(a)redhat.com&gt; Gerrit-Reviewer: Ofer Schreiber <oschreib(a)redhat.com&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt;