Change in ovirt-engine[master]: packaging: engine-service: protect configuration files

[oschreib at redhat.com]

Ofer Schreiber has submitted this change and it was merged.

Change subject: packaging: engine-service: protect configuration files
......................................................................


packaging: engine-service: protect configuration files

we need to protect configuration files as database password resides
within.

for some reason jboss changes the permissions of configuration file and
deployment to 0777, enforcing umask of 0027 perform some remedy at the
price of having logs not world readable as well, so it is not a
solution.

luckily, jboss does not modify the directory in which configuration file
resides, so we split the configuration directory to own directory and
set proper permissions.

Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9
Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>
---
M packaging/services/ovirt-engine.py
M packaging/services/service.py
2 files changed, 34 insertions(+), 19 deletions(-)

Approvals:
  Alon Bar-Lev: Verified
  Ofer Schreiber: Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/14567
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ie76e5ffcdccd8c3a0bedbb9ce9bd56e146eeccd9
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>