yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: horizon
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1220884

Title:
  Default path for .secret_key file may not be writable, setting
  shouldn't be in multiple places

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  We currently write the secret key file to the disk in the local
  directory in openstack_dashboard. This directory may not be writable
  by the webserver process (though this has not been reported as a bug
  so far). Using /tmp would work, but things in /tmp can often be
  inadvertantly cleared, etc.

  Moreover, the code that auto-writes the secret key file is now in both
  the base settings and local_settings.py.example. This is duplicative,
  though we should still mention the importance of SECRET_KEY and what
  the options for it are in the local_settings.py.example.

  Basically this ticket is to revisit the current state of things and
  make sure we're doing the best thing by our users while ensuring that
  automated systems like Jenkins can do a git clone and immediately run
  commands.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1220884/+subscriptions