Skip to content

Commit

Permalink
lbnl-nhc.spec.in: Allow for normal user access
Browse files Browse the repository at this point in the history
At LANL, we have use cases that will require `nhc` and its script
files to be readable by normal system users.  Previously, several
directories owned by the `lbnl-nhc` RPM package had permissions of
`0700` for security/privacy reasons; however, nothing in the RPM
itself is privacy- or security-sensitive, so there's no reason to
limit functionality unnecessarily.

It's still possible to obtain the prior behavior by building without
`useraccess` (i.e., `rpmbuild --without useraccess ...`), but the
default is now to use the less restrictive permissions.

Closes #122.
  • Loading branch information
mej committed Apr 24, 2023
1 parent cc165f9 commit 071a0e5
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion lbnl-nhc.spec.in
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,10 @@
%{!?nhc_script_dir:%global nhc_script_dir %{_sysconfdir}/%{sname}/scripts}
%{!?nhc_helper_dir:%global nhc_helper_dir %{_libexecdir}/%{sname}}

### Build conditional(s)
# Should NHC be accessible for normal users' use?
%bcond_without useraccess


Summary: LBNL Node Health Check
Name: %{name}
Expand Down Expand Up @@ -79,7 +83,7 @@ project home page at https://github.com/mej/nhc


%install
umask 0077
umask %{?with_useraccess:0022}%{!?with_useraccess:0077}
%{__make} install DESTDIR=$RPM_BUILD_ROOT %{?mflags_install}


Expand Down

0 comments on commit 071a0e5

Please sign in to comment.