Skip to content
This repository has been archived by the owner on Oct 23, 2024. It is now read-only.

*.service files should be world-readable #86

Open
chriskuehl opened this issue Aug 3, 2016 · 0 comments
Open

*.service files should be world-readable #86

chriskuehl opened this issue Aug 3, 2016 · 0 comments

Comments

@chriskuehl
Copy link

Currently the service files are installed with 640 permissions:

ckuehl@whirlwind:~$ ls -l /lib/systemd/system/mesos*.service
-rw-r----- 1 root root 215 Jul 27 13:45 /lib/systemd/system/mesos-master.service
-rw-r----- 1 root root 271 Jul 27 13:45 /lib/systemd/system/mesos-slave.service

These should be 644 or similar. As is, this produces warnings all the time:

Aug 03 13:39:02 whirlwind systemd[1]: Configuration file /lib/systemd/system/mesos-slave.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Aug 03 13:39:02 whirlwind systemd[1]: Configuration file /lib/systemd/system/mesos-slave.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Aug 03 13:39:02 whirlwind systemd[1]: Configuration file /lib/systemd/system/mesos-slave.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Aug 03 13:39:02 whirlwind systemd[1]: Configuration file /lib/systemd/system/mesos-slave.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Aug 03 13:39:02 whirlwind systemd[1]: Configuration file /lib/systemd/system/mesos-slave.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.

These go both to syslog and to the console when running certain systemd commands.

The warnings are correct of course (try systemctl show mesos-slave as non-root).

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant