← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1066115] Re: The landscape client plugin doesn't create the config file with the proper permissions

 

This bug was fixed in the package cloud-init - 0.7.0-0ubuntu2.2

---------------
cloud-init (0.7.0-0ubuntu2.2) quantal-proposed; urgency=low

  * debian/patches/lp-1090482-fix-cloud-config-mirrors.patch:
    fix issue with cloud-config data in user-data providing mirror
    info (LP: #1073077)

cloud-init (0.7.0-0ubuntu2.1) quantal-proposed; urgency=low

  * debian/patches/lp-1073077-zsh-workaround-for-locale_warn.patch: avoid
    warning when user's shell is zsh (LP: #1073077)
  * debian/patches/lp-1077700-config-drive-fix-ssh-authorized-keys.patch:
    fix bug in config-drive-v2 usage of authoried keys (LP: #1077700)
  * debian/patches/lp-1080985-fix-resize-root-noblock.patch:
    fix 'resize_root: noblock' (LP: #1080985)
  * debian/patches/lp-1076811-fix-userdata-update-to-distro-config.patch:
    fix updates to distro config via user-data. (LP: #1076811)
  * debian/patches/lp-1066115-install-landscape-if-needed.patch:
    fix permissions on landscape config, and ensure landscape client
    is installed if landscape config is given. (LP: #1066115)
  * debian/patches/lp-1070345-restart-landscape-if-needed.patch:
    restart the landscape-client if changes to config were made. (LP: #1070345)
  * debian/patches/lp-1077020-fix-ca-certificates-blanklines.patch: fix
    adding of empty lines in ca-certificates file (LP: #1077020)
 -- Scott Moser <smoser@xxxxxxxxxx>   Mon, 17 Dec 2012 10:15:03 -0500

** Changed in: cloud-init (Ubuntu Quantal)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1066115

Title:
  The landscape client plugin doesn't create the config file with the
  proper permissions

Status in Init scripts for use on cloud images:
  Fix Released
Status in “cloud-init” package in Ubuntu:
  Fix Released
Status in “cloud-init” source package in Precise:
  Fix Released
Status in “cloud-init” source package in Quantal:
  Fix Released

Bug description:
  === Begin SRU Information ===
  [Impact]
   * If an image does not have landscape-client installed inside it, and the
     user provided landscape config, then:
     a.) the landscape config file would be written with root:root permissions
         so that the user that landscape runs as could not change it.
     b.) the landscape package would not be installed.

   * The fix here is just to install the landscape-client package.  This is
     clearly what the user would want.
     Additionally, no package installation occurs unless the user made that
     request.  The fix for 'a' is also addressed by this because the file will
     exist on disk with proper permissions before cloud-init writes it, and
     will thus keep the same ownership.

  [Test Case]
   * launch instance with landscape config in user-data like the following:
     #cloud-config
     apt_upgrade: True
     apt_sources:
      - source: deb $MIRROR $RELEASE-proposed main
     landscape:
       client:
         url: "https://landscape.canonical.com/message-system";
         ping_url: "http://landscape.canonical.com/ping";
         data_path: "/var/lib/landscape/client"
         http_proxy: "http://my.proxy.com/foobar";
         tags: "server,cloud"
   * upon investigation, /etc/landscape/client.conf should be owned
     by 'landscape' user rather than root.

  [Regression Potential]
   * If a user with a generic user_data setup is assuming that the 'landscape' config will be applied only on those images which already have landscape-client installed, automatically installing landscape-client will be an unexpected a behavior change.

  === End SRU Information ===

  When cloud-init runs and landscape-client is not installed, it creates
  /etc/landscape/client.conf owned as root:root, whereas landscape-
  client expects it to be landscape:root. The proper fix is although
  probably to require installation of landscape-client first, as it will
  create the file properly, and then landscape-client can update it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1066115/+subscriptions