Skip to content

(profile::ccs::home) handle EL8+ login.defs home dir perms #1199

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: production
Choose a base branch
from
Open

(profile::ccs::home) handle EL8+ login.defs home dir perms #1199

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion site/profile/manifests/ccs/home.pp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,13 @@
## rather than each having their own?
file_line { 'Change default home permissions':
path => '/etc/login.defs',
match => '^UMASK ',
match => '^UMASK\s',
line => 'UMASK 022',
}
file_line { 'Change default home permissions for EL8+':
path => '/etc/login.defs',
match => '^HOME_MODE\s',
line => 'HOME_MODE 0755',
Copy link
Member

@jhoblitt jhoblitt Jun 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this would probably apply to home dirs created for IPA users as well. What is trying to be accomplished?

Copy link
Contributor Author

@glennmorris glennmorris Jun 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Having it apply to IPA users is the wanted behaviour.
The intent is to make the home dirs of normal users world-readable by default, since this is a collaborative enterprise and people need to share work.

Copy link
Member

@jhoblitt jhoblitt Jun 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This needs to wait until Cristian returns from leave next week for further discussion.

append_on_no_match => false,
}
}