security - Keystone configuration file permissions -


i'm playing around juju , openstack , installed keystone identity service on 1 of nodes. ssh-ing machine noticed permissions of configuration file /etc/keystone/keystone.conf 644 (rw-r--r--) means readable user on system.

keeping in mind file contains mysql username , password, wouldn't right file readable keystone user?

note i've tried installing using both juju , hand using fresh ubuntu 14.04 same results.

edit: forgot mention openstack documentation doesn't mention permissions in docs.

i don't think other openstack services use keystone.conf. may change ownership keystone , change permission keystone can read.

chown keystone:keystone /etc/keystone/keystone.conf  chmod 600 /etc/keystone/keystone 

Comments

Popular posts from this blog

javascript - Jquery show_hide, what to add in order to make the page scroll to the bottom of the hidden field once button is clicked -

javascript - Highcharts multi-color line -

javascript - Enter key does not work in search box -