Skip to content

Set file ownership or permissions on community plugins #469

Open
@mdunc

Description

@mdunc

On CIS benchmarked servers (and possibly other benchmarks), the umask settings are pretty strict with all new files getting created with permissions of 600. Since plugins get downloaded as root and end up with these permissions, the rabbitmq service cannot read the plugin and fails to start.

Possible fixes are to add the following to the remote_file section of community_plugins.rb to set ownership to rabbitmq, preserving permissions:

owner 'rabbitmq'
group 'rabbitmq'

or change the permissions with the following (edit: thinking about it more, I think this would be consistent with other plugins and probably preferable):

mode 0644

Activity

added this to the 5.6.0 milestone on Feb 19, 2018
modified the milestones: 5.6.0, 5.6.2 on Mar 1, 2018
removed this from the 5.6.2 milestone on Mar 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @michaelklishin@mdunc

        Issue actions

          Set file ownership or permissions on community plugins · Issue #469 · rabbitmq/chef-cookbook