You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We (LANL) would like to be able to provide (limited) use of NHC to non-root users, but the permissions settings in the RPM specfile are too restrictive (intentionally) to facilitate this. Specifically, the following changes need to be made:
Mode 0711 for directory /etc/nhc
Mode 0755 for directory /etc/nhc/scripts
Mode 0644 for files /etc/nhc/scripts/*.nhc
Mode 0755 for directory /usr/libexec/nhc
Mode 0755 for files /usr/libexec/nhc/*
If other necessary changes are revealed, they will be added here.
The text was updated successfully, but these errors were encountered:
At LANL, we have use cases that will require `nhc` and its script
files to be readable by normal system users. Previously, several
directories owned by the `lbnl-nhc` RPM package had permissions of
`0700` for security/privacy reasons; however, nothing in the RPM
itself is privacy- or security-sensitive, so there's no reason to
limit functionality unnecessarily.
It's still possible to obtain the prior behavior by building without
`useraccess` (i.e., `rpmbuild --without useraccess ...`), but the
default is now to use the less restrictive permissions.
Closes#122.
We (LANL) would like to be able to provide (limited) use of NHC to non-
root
users, but the permissions settings in the RPM specfile are too restrictive (intentionally) to facilitate this. Specifically, the following changes need to be made:0711
for directory/etc/nhc
0755
for directory/etc/nhc/scripts
0644
for files/etc/nhc/scripts/*.nhc
0755
for directory/usr/libexec/nhc
0755
for files/usr/libexec/nhc/*
If other necessary changes are revealed, they will be added here.
The text was updated successfully, but these errors were encountered: