[jboss-jira] [JBoss JIRA] (WFLY-11074) Enhance file permissions on Wildfly distribution

[Romain Pelisse (JIRA)]

Romain Pelisse created WFLY-11074:
-------------------------------------

             Summary: Enhance file permissions on Wildfly distribution 
                 Key: WFLY-11074
                 URL: https://issues.jboss.org/browse/WFLY-11074
             Project: WildFly
          Issue Type: Enhancement
          Components: Build System
    Affects Versions: 14.0.0.Final
            Reporter: Romain Pelisse
            Assignee: Romain Pelisse
            Priority: Minor


I've been trying to tweak some file permissions on the distribution of Wildfly (zipfile and folder), to reduce their accessibility:

A) directories readable for others:
files affected: bin, domain, migration,standalone, bin/client, docs/examples, docs/licenses
Current file Permissions: rwxr-xr-x
Target: rwxr-x--x

B) no 'x' privileges for members of the others group
files affected: domain/tmp, standalone/tmp"
Current file Permissions: rwxrwx---
Target: rwxrwx--x

C) unneeded 'x' privileges on libwfssl.so
modules/system/layers/base/org/wildfly/openssl/main/lib/linux-i386/libwfssl.so
Current file Permissions: rwxrwxr-x
Target: rw-rw-r--

I have failed to implement those changes because updating to the [feature-pack.xml|https://github.com/wildfly/wildfly/blob/883115ea2168343e870745f538a80b1ddc360914/feature-pack/feature-pack-build.xml#L174] does not changes the permissions as expected. Indeed instead of ending up with a 755 mask the files ends up with a 775 mask. At first, it was a minor bug in the Wildfly Maven Build plugin, but debugging through it, I found out the related code is not even invoked for those particular files. 

I also double check that the issue was not in the [Galleon Plugin|https://github.com/wildfly/galleon-plugins/blob/master/galleon-plugins/src/main/java/org/wildfly/galleon/plugin/config/FilePermissions.java], as it seems some posix file changes also happens there.

At last, I've try to modify the numerous 'assembly.xml' living inside the project, but without any success. Does anyone know where and how I should implement those minor changes?






--
This message was sent by Atlassian JIRA
(v7.5.0#75005)