Page MenuHomeDevCentral

Ensure /home/username has correct permissions on ZFS servers
ClosedPublic

Authored by dereckson on Mar 22 2022, 18:00.
Tags
None
Referenced Files
F4080065: D2623.diff
Fri, Jan 31, 14:43
F4079739: D2623.id6629.diff
Fri, Jan 31, 12:33
Unknown Object (File)
Mon, Jan 27, 07:03
Unknown Object (File)
Sun, Jan 26, 05:39
Unknown Object (File)
Thu, Jan 23, 23:44
Unknown Object (File)
Mon, Jan 20, 03:38
Unknown Object (File)
Tue, Jan 14, 09:51
Unknown Object (File)
Tue, Jan 14, 03:33
Subscribers
None

Details

Summary

If the user exists, but the home directory doesn't exist,
a tank/usr/home/luser ZFS volume is created, mounted at
/home/luser, but with root:root ownership.

This changes adds a step to set correctly home directory
permissions. This step will be ignored on non ZFS servers.

As a side-effect, on development servers, if the change runs
again, the permissions will be reset to 0700. This is coherent
with the policy project experiments should be created in /srv.

Test Plan
  • Delete an user and home directory
  • state.sls roles/core/users

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.
dereckson edited the summary of this revision. (Show Details)
This revision is now accepted and ready to land.Mar 22 2022, 18:02