[jboss-jira] [JBoss JIRA] (AS7-4536) add-user.sh mangles permissions of mgmt-users.properties

[Carlo de Wolf (JIRA)]

     [ https://issues.jboss.org/browse/AS7-4536?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carlo de Wolf updated AS7-4536:
-------------------------------

    Description: 
After running add-user.sh the mgmt-users.properties file has the wrong ownership and permissions.
{noformat}
[root at jboss-as bin]# ls -hall /etc/jboss-as/standalone/
total 48K
drwxrwxr-x. 3 root jboss-as 4.0K Apr 17 09:26 .
drwxr-xr-x. 4 root root 4.0K Apr 16 21:01 ..
-rw-rw-r--. 1 jboss-as jboss-as 787 Apr 16 20:48 application-roles.properties
-rw-rw-r--. 1 jboss-as jboss-as 813 Apr 16 20:48 application-users.properties
-rw-rw-r--. 1 jboss-as jboss-as 2.0K Apr 16 20:48 logging.properties
-rw-r--r--. 1 root root 879 Apr 17 09:26 mgmt-users.properties
-rw-rw-r--. 1 jboss-as jboss-as 837 Apr 16 20:48 mgmt-users.properties.bak
-rw-r--r--. 1 jboss-as jboss-as 11K Apr 17 09:18 standalone-web.xml
-rw-rw-r--. 1 jboss-as jboss-as 1.5K Apr 16 20:48 standalone.xml
drwxr-xr-x. 4 jboss-as jboss-as 4.0K Apr 16 17:10 standalone_xml_history
{noformat}
Ownership and permissions should be the same as the previously installed mgmt-users.properties.
(Note that due to a packaging bug the permissions are not 600.)

PropertiesFileLoader creates a new file without taking these requirements into account.

  was:
After running add-user.sh the mgmt-users.properties file has the wrong ownership and permissions.
{noformat}
[root at jboss-as bin]# ls -hall /etc/jboss-as/standalone/
total 48K
drwxrwxr-x. 3 root jboss-as 4.0K Apr 17 09:26 .
drwxr-xr-x. 4 root root 4.0K Apr 16 21:01 ..
-rw-rw-r--. 1 jboss-as jboss-as 787 Apr 16 20:48 application-roles.properties
-rw-rw-r--. 1 jboss-as jboss-as 813 Apr 16 20:48 application-users.properties
-rw-rw-r--. 1 jboss-as jboss-as 2.0K Apr 16 20:48 logging.properties
-rw-r--r--. 1 root root 879 Apr 17 09:26 mgmt-users.properties
-rw-rw-r--. 1 jboss-as jboss-as 837 Apr 16 20:48 mgmt-users.properties.bak
-rw-r--r--. 1 jboss-as jboss-as 11K Apr 17 09:18 standalone-web.xml
-rw-rw-r--. 1 jboss-as jboss-as 1.5K Apr 16 20:48 standalone.xml
drwxr-xr-x. 4 jboss-as jboss-as 4.0K Apr 16 17:10 standalone_xml_history
{noformat}
Ownership and permissions should be the same as the previously installed mgmt-users.properties.
(Note that due to a packaging bug the permissions are not 600.)

PropertiesFileLoader creates a new file without these requirements into account.


    
> add-user.sh mangles permissions of mgmt-users.properties
> --------------------------------------------------------
>
>                 Key: AS7-4536
>                 URL: https://issues.jboss.org/browse/AS7-4536
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Domain Management, Security
>         Environment: Fedora 17
>            Reporter: Carlo de Wolf
>            Assignee: Brian Stansberry
>            Priority: Critical
>             Fix For: 7.1.2.Final-redhat1
>
>
> After running add-user.sh the mgmt-users.properties file has the wrong ownership and permissions.
> {noformat}
> [root at jboss-as bin]# ls -hall /etc/jboss-as/standalone/
> total 48K
> drwxrwxr-x. 3 root jboss-as 4.0K Apr 17 09:26 .
> drwxr-xr-x. 4 root root 4.0K Apr 16 21:01 ..
> -rw-rw-r--. 1 jboss-as jboss-as 787 Apr 16 20:48 application-roles.properties
> -rw-rw-r--. 1 jboss-as jboss-as 813 Apr 16 20:48 application-users.properties
> -rw-rw-r--. 1 jboss-as jboss-as 2.0K Apr 16 20:48 logging.properties
> -rw-r--r--. 1 root root 879 Apr 17 09:26 mgmt-users.properties
> -rw-rw-r--. 1 jboss-as jboss-as 837 Apr 16 20:48 mgmt-users.properties.bak
> -rw-r--r--. 1 jboss-as jboss-as 11K Apr 17 09:18 standalone-web.xml
> -rw-rw-r--. 1 jboss-as jboss-as 1.5K Apr 16 20:48 standalone.xml
> drwxr-xr-x. 4 jboss-as jboss-as 4.0K Apr 16 17:10 standalone_xml_history
> {noformat}
> Ownership and permissions should be the same as the previously installed mgmt-users.properties.
> (Note that due to a packaging bug the permissions are not 600.)
> PropertiesFileLoader creates a new file without taking these requirements into account.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira