security - Keystone configuration file permissions -
i'm playing around juju , openstack , installed keystone identity service on 1 of nodes. ssh-ing machine noticed permissions of configuration file /etc/keystone/keystone.conf
644 (rw-r--r--
) means readable user on system.
keeping in mind file contains mysql
username , password, wouldn't right file readable keystone
user?
note i've tried installing using both juju , hand using fresh ubuntu 14.04 same results.
edit: forgot mention openstack documentation doesn't mention permissions in docs.
i don't think other openstack services use keystone.conf. may change ownership keystone , change permission keystone can read.
chown keystone:keystone /etc/keystone/keystone.conf chmod 600 /etc/keystone/keystone
Comments
Post a Comment