Change in ovirt-engine[ovirt-engine-3.3]: packaging: setup: aio: fix ssh issues

[iheim at redhat.com]

Itamar Heim has submitted this change and it was merged.

Change subject: packaging: setup: aio: fix ssh issues
......................................................................


packaging: setup: aio: fix ssh issues

1. If ~root/.ssh is missing and selinux enabled, it will be created
   without proper selinux attributes, causing ssh to fail.

2. If ~root/.ssh is missing it is created using mode 0755 and not 0700.

3. Validate /etc/ssh/sshd_config, if PermitRootLogin is no then fail
   early.

Buf-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1036209
Change-Id: Icfe55ccf4535792fed69912553d86a53dec3764b
Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>
---
M packaging/setup/ovirt_engine_setup/constants.py
M packaging/setup/plugins/ovirt-engine-setup/all-in-one/sshd.py
M packaging/setup/plugins/ovirt-engine-setup/all-in-one/vdsm.py
3 files changed, 57 insertions(+), 0 deletions(-)

Approvals:
  Alon Bar-Lev: Looks good to me, but someone else must approve
  Sandro Bonazzola: Verified; Looks good to me, approved



-- 
To view, visit http://gerrit.ovirt.org/22119
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Icfe55ccf4535792fed69912553d86a53dec3764b
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-3.3
Gerrit-Owner: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Itamar Heim <iheim at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi at redhat.com>
Gerrit-Reviewer: r herrold <herrold at owlriver.com>