[dev.icinga.com #11212] Wrong permissions for files in /var/cache/icinga2/*

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/11212

Created by ricardo on 2016-02-24 07:14:25 +00:00

Assignee: mfriedrich
Status: Resolved (closed on 2016-02-24 10:25:05 +00:00)
Target Version: 2.4.3
Last Update: 2016-02-24 10:29:20 +00:00 (in Redmine)

Icinga Version: 2.4.2
Backport?: Not yet backported
Include in Changelog: 1

---

Hi,

after upgrading to Icinga2 it's impossible to use Classic UI anymore bacause all files under /var/cache/icinga2/ are created with umask 277.

Changesets

2016-02-24 10:00:44 +00:00 by mfriedrich 47c5425

Fix permissions for temporary files

fixes #11212
fixes #11211

2016-02-24 10:27:22 +00:00 by mfriedrich a79ea88

Fix permissions for temporary files

fixes #11212
fixes #11211

2016-02-24 12:55:25 +00:00 by mfriedrich 9ba26ad

Ensure that config files are readable by the daemon

refs #11212
refs #11211

2016-02-24 13:24:08 +00:00 by mfriedrich 894aaae

Ensure that config files are readable by the daemon

refs #11212
refs #11211

2016-02-24 13:25:09 +00:00 by mfriedrich e4b99ca

Ensure that config files are readable by the daemon

refs #11212
refs #11211

---

Relations:

• relates #10948
• relates #11211

[icinga-migration]

Updated by barry.quiel on 2016-02-24 09:27:55 +00:00

The permissions on both:
/var/lib/icinga2/icinga2.state
/var/cache/icinga2/status.dat

are being set to 600 when the filed is flushed to disk. This breaks the classic UI because the apache user does not have permissions to read the files.

As a short term work around I put in a cronjob that runs every minute and does a chmod 644 on those files. Probably broader then it needs to be because the apache user is a member of the icinga and icingacmd groups so 640 would probably work.

[icinga-migration]

Updated by mfriedrich on 2016-02-24 09:58:21 +00:00

• Category set to libbase
• Status changed from New to Assigned
• Assigned to set to mfriedrich
• Priority changed from Normal to High
• Target Version set to 2.4.3

Problem with a last minute fix in #10948, working on a fix now.

[icinga-migration]

Updated by mfriedrich on 2016-02-24 09:58:29 +00:00

• Relates set to 10948

[icinga-migration]

Updated by mfriedrich on 2016-02-24 10:25:05 +00:00

• Status changed from Assigned to Resolved
• Done % changed from 0 to 100

Applied in changeset 47c5425.

[icinga-migration]

Updated by mfriedrich on 2016-02-24 10:29:20 +00:00

• Subject changed from Icinga2 changes permission of /var/cache/icinga2/* to 600 makes it unable to read data by webserver to _Wrong permissions for files in /var/cache/icinga2/* _

[icinga-migration]

Updated by mfriedrich on 2016-02-24 11:50:31 +00:00

• Relates set to 11211