Skip to content

Commit

Permalink
Updating file permissions for XDMoD's bin directory (#1510)
Browse files Browse the repository at this point in the history
* Updating file permissions for XDMoD's bin directory

These changes are to address TrustedCI 6.2.5, tracked at
https://app.asana.com/0/15230011293655/1188274656222921 .

We're updating the permissions of files in XDMoD's `bin` directory from `0755`
to `0750` to ensure only users in the xdmod group ( or root ) can execute these
files.

* Updating the group for the bin dir

* Update docs/install-source.md

Co-authored-by: Joe White <jpwhite4@buffalo.edu>

* Updates per @jpwhite code review

Co-authored-by: Ryan Rathsam <build@shippable.com>
Co-authored-by: Joe White <jpwhite4@buffalo.edu>
  • Loading branch information
3 people authored Mar 12, 2021
1 parent a97c692 commit 9769018
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 1 deletion.
4 changes: 4 additions & 0 deletions docs/install-source.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,10 @@ Update log directory and file ownership and permissions:
The `exceptions.log` and `query.log` may be written to by both Apache and Open
XDMoD commands.

Update the bin directory permissions so that only users with the `xdmod` group can run Open XDMoD commands:

# chmod 750 /opt/xdmod/bin/*

Run Configuration Script
------------------------

Expand Down
4 changes: 3 additions & 1 deletion open_xdmod/modules/xdmod/xdmod.spec.in
Original file line number Diff line number Diff line change
Expand Up @@ -72,9 +72,11 @@ exit 0
rm -rf $RPM_BUILD_ROOT

%files
%defattr(-,root,root,-)
%defattr(0750,root,xdmod,-)
%{_bindir}/%{name}-*
%{_bindir}/acl-*

%defattr(-,root,root,-)
%{_libdir}/%{name}/
%{_datadir}/%{name}/
%{_docdir}/%{name}-%{version}__PRERELEASE__/
Expand Down

0 comments on commit 9769018

Please sign in to comment.