[jboss-jira] [JBoss JIRA] (WFLY-11074) Enhance file permissions on Wildfly distribution

[Ranabir Chakraborty (Jira)]

    [ https://issues.redhat.com/browse/WFLY-11074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14005194#comment-14005194 ] 

Ranabir Chakraborty commented on WFLY-11074:
--------------------------------------------

[~rpelisse] is this issue still open ?

> Enhance file permissions on Wildfly distribution 
> -------------------------------------------------
>
>                 Key: WFLY-11074
>                 URL: https://issues.redhat.com/browse/WFLY-11074
>             Project: WildFly
>          Issue Type: Enhancement
>          Components: Build System
>    Affects Versions: 14.0.0.Final
>            Reporter: Romain Pelisse
>            Priority: Minor
>
> I've been trying to tweak some file permissions on the distribution of Wildfly (zipfile and folder), to reduce their accessibility:
> A) directories readable for others:
> files affected: bin, domain, migration,standalone, bin/client, docs/examples, docs/licenses
> Current file Permissions: rwxr-xr-x
> Target: rwxr-x--x
> B) no 'x' privileges for members of the others group
> files affected: domain/tmp, standalone/tmp"
> Current file Permissions: rwxrwx---
> Target: rwxrwx--x
> C) unneeded 'x' privileges on libwfssl.so
> modules/system/layers/base/org/wildfly/openssl/main/lib/linux-i386/libwfssl.so
> Current file Permissions: rwxrwxr-x
> Target: rw-rw-r--
> I have failed to implement those changes because updating to the [feature-pack.xml|https://github.com/wildfly/wildfly/blob/883115ea2168343e870745f538a80b1ddc360914/feature-pack/feature-pack-build.xml#L174] does not changes the permissions as expected. Indeed instead of ending up with a 755 mask the files ends up with a 775 mask. At first, it was a minor bug in the Wildfly Maven Build plugin, but debugging through it, I found out the related code is not even invoked for those particular files. 
> I also double check that the issue was not in the [Galleon Plugin|https://github.com/wildfly/galleon-plugins/blob/master/galleon-plugins/src/main/java/org/wildfly/galleon/plugin/config/FilePermissions.java], as it seems some posix file changes also happens there.
> At last, I've try to modify the numerous 'assembly.xml' living inside the project, but without any success. Does anyone know where and how I should implement those minor changes?



--
This message was sent by Atlassian Jira
(v7.13.8#713008)