yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1586986] [NEW] vpnaas: Copy strongswan.d needs root rights

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thomas Bechtold <tbechtold@xxxxxxxx>
Date: Mon, 30 May 2016 09:51:52 -0000
Reply-to: Bug 1586986 <1586986@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Public bug reported:

Using shutil.copytree() doesn't work if "/etc/strongwan.d/ is owned by root but the neutron-vpn-agent is running on a different user (i.e. "neutron").
The error message is:

2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher [req-a50cffcd-b59e-4aa3-a38c-80276e7855f2 bb02d9c6a9d142bdb9beb6dea7b71271 49748f1f979846ec9b05f100bffe30a8 - - -] Exception during message handling: [('/etc/strongswan.d/starter.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/starter.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/starter.conf'"), ('/etc/strongswan.d/tools.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tools.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tools.conf'"), ('/etc/strongswan.d/charon.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon.conf'"), ('/etc/strongswan.d/charon-logging.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon-logging.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon-logging.conf'"), ('/etc/strongswan.d/pool.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/pool.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/pool.conf'"), ('/etc/strongswan.d/imcv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/imcv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/imcv.conf'"), ('/etc/strongswan.d/tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tnc.conf'"), ('/etc/strongswan.d/charon/x509.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/x509.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/x509.conf'"), ('/etc/strongswan.d/charon/radattr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/radattr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/radattr.conf'"), ('/etc/strongswan.d/charon/pkcs8.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs8.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs8.conf'"), ('/etc/strongswan.d/charon/fips-prf.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/fips-prf.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/fips-prf.conf'"), ('/etc/strongswan.d/charon/smp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/smp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/smp.conf'"), ('/etc/strongswan.d/charon/eap-identity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-identity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-identity.conf'"), ('/etc/strongswan.d/charon/tnc-tnccs.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-tnccs.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-tnccs.conf'"), ('/etc/strongswan.d/charon/ldap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ldap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ldap.conf'"), ('/etc/strongswan.d/charon/dnskey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dnskey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dnskey.conf'"), ('/etc/strongswan.d/charon/sha2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha2.conf'"), ('/etc/strongswan.d/charon/tnc-pdp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-pdp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-pdp.conf'"), ('/etc/strongswan.d/charon/sshkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sshkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sshkey.conf'"), ('/etc/strongswan.d/charon/pkcs7.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs7.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs7.conf'"), ('/etc/strongswan.d/charon/eap-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-dynamic.conf'"), ('/etc/strongswan.d/charon/hmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/hmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/hmac.conf'"), ('/etc/strongswan.d/charon/xauth-eap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-eap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-eap.conf'"), ('/etc/strongswan.d/charon/des.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/des.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/des.conf'"), ('/etc/strongswan.d/charon/eap-ttls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-ttls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-ttls.conf'"), ('/etc/strongswan.d/charon/revocation.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/revocation.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/revocation.conf'"), ('/etc/strongswan.d/charon/eap-mschapv2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-mschapv2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-mschapv2.conf'"), ('/etc/strongswan.d/charon/ccm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ccm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ccm.conf'"), ('/etc/strongswan.d/charon/stroke.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/stroke.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/stroke.conf'"), ('/etc/strongswan.d/charon/rc2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/rc2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/rc2.conf'"), ('/etc/strongswan.d/charon/cmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/cmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/cmac.conf'"), ('/etc/strongswan.d/charon/pkcs11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs11.conf'"), ('/etc/strongswan.d/charon/pkcs1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs1.conf'"), ('/etc/strongswan.d/charon/eap-md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-md5.conf'"), ('/etc/strongswan.d/charon/openssl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/openssl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/openssl.conf'"), ('/etc/strongswan.d/charon/certexpire.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/certexpire.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/certexpire.conf'"), ('/etc/strongswan.d/charon/gmp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gmp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gmp.conf'"), ('/etc/strongswan.d/charon/coupling.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/coupling.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/coupling.conf'"), ('/etc/strongswan.d/charon/sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sql.conf'"), ('/etc/strongswan.d/charon/xcbc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xcbc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xcbc.conf'"), ('/etc/strongswan.d/charon/xauth-pam.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-pam.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-pam.conf'"), ('/etc/strongswan.d/charon/eap-gtc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-gtc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-gtc.conf'"), ('/etc/strongswan.d/charon/eap-aka.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka.conf'"), ('/etc/strongswan.d/charon/eap-sim-file.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-file.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-file.conf'"), ('/etc/strongswan.d/charon/soup.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/soup.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/soup.conf'"), ('/etc/strongswan.d/charon/addrblock.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/addrblock.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/addrblock.conf'"), ('/etc/strongswan.d/charon/pgp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pgp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pgp.conf'"), ('/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-pseudonym.conf'"), ('/etc/strongswan.d/charon/constraints.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/constraints.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/constraints.conf'"), ('/etc/strongswan.d/charon/pkcs12.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs12.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs12.conf'"), ('/etc/strongswan.d/charon/af-alg.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/af-alg.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/af-alg.conf'"), ('/etc/strongswan.d/charon/eap-simaka-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-sql.conf'"), ('/etc/strongswan.d/charon/curl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/curl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/curl.conf'"), ('/etc/strongswan.d/charon/socket-default.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/socket-default.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/socket-default.conf'"), ('/etc/strongswan.d/charon/pubkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pubkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pubkey.conf'"), ('/etc/strongswan.d/charon/blowfish.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/blowfish.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/blowfish.conf'"), ('/etc/strongswan.d/charon/gcm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcm.conf'"), ('/etc/strongswan.d/charon/xauth-generic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-generic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-generic.conf'"), ('/etc/strongswan.d/charon/tnc-imv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imv.conf'"), ('/etc/strongswan.d/charon/unity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/unity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/unity.conf'"), ('/etc/strongswan.d/charon/duplicheck.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/duplicheck.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/duplicheck.conf'"), ('/etc/strongswan.d/charon/aes.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/aes.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/aes.conf'"), ('/etc/strongswan.d/charon/md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md5.conf'"), ('/etc/strongswan.d/charon/eap-radius.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-radius.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-radius.conf'"), ('/etc/strongswan.d/charon/eap-aka-3gpp2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka-3gpp2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka-3gpp2.conf'"), ('/etc/strongswan.d/charon/kernel-netlink.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/kernel-netlink.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/kernel-netlink.conf'"), ('/etc/strongswan.d/charon/resolve.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/resolve.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/resolve.conf'"), ('/etc/strongswan.d/charon/eap-sim.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim.conf'"), ('/etc/strongswan.d/charon/attr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr.conf'"), ('/etc/strongswan.d/charon/agent.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/agent.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/agent.conf'"), ('/etc/strongswan.d/charon/ctr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ctr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ctr.conf'"), ('/etc/strongswan.d/charon/farp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/farp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/farp.conf'"), ('/etc/strongswan.d/charon/attr-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr-sql.conf'"), ('/etc/strongswan.d/charon/random.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/random.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/random.conf'"), ('/etc/strongswan.d/charon/ha.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ha.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ha.conf'"), ('/etc/strongswan.d/charon/eap-simaka-reauth.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-reauth.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-reauth.conf'"), ('/etc/strongswan.d/charon/nonce.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/nonce.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/nonce.conf'"), ('/etc/strongswan.d/charon/tnccs-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-dynamic.conf'"), ('/etc/strongswan.d/charon/tnc-imc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imc.conf'"), ('/etc/strongswan.d/charon/dhcp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dhcp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dhcp.conf'"), ('/etc/strongswan.d/charon/gcrypt.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcrypt.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcrypt.conf'"), ('/etc/strongswan.d/charon/eap-tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tnc.conf'"), ('/etc/strongswan.d/charon/led.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/led.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/led.conf'"), ('/etc/strongswan.d/charon/eap-tls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tls.conf'"), ('/etc/strongswan.d/charon/eap-peap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-peap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-peap.conf'"), ('/etc/strongswan.d/charon/tnccs-11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-11.conf'"), ('/etc/strongswan.d/charon/tnccs-20.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-20.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-20.conf'"), ('/etc/strongswan.d/charon/pem.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pem.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pem.conf'"), ('/etc/strongswan.d/charon/sha1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha1.conf'"), ('/etc/strongswan.d/charon/eap-sim-pcsc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-pcsc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-pcsc.conf'"), ('/etc/strongswan.d/charon/updown.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/updown.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/updown.conf'"), ('/etc/strongswan.d/charon/md4.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md4.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md4.conf'")]
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher Traceback (most recent call last):
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 142, in _dispatch_and_reply
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     executor_callback))
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 186, in _dispatch
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     executor_callback)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 129, in _do_dispatch
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     result = func(ctxt, **new_args)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 669, in vpnservice_updated
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.sync(context, [router] if router else [])
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_concurrency/lockutils.py", line 254, in inner
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     return f(*args, **kwargs)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 823, in sync
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self._sync_vpn_processes(vpnservices, sync_router_ids)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 847, in _sync_vpn_processes
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     process.update()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 238, in update
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.enable()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 256, in enable
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.ensure_configs()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 132, in ensure_configs
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self._get_config_filename('strongswan.d'))
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 109, in copy_and_overwrite
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     shutil.copytree(from_path, to_path)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib64/python2.7/shutil.py", line 208, in copytree
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     raise Error, errors

** Affects: neutron
     Importance: Undecided
     Assignee: Thomas Bechtold (toabctl)
         Status: In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1586986

Title:
  vpnaas: Copy strongswan.d needs root rights

Status in neutron:
  In Progress

Bug description:
  Using shutil.copytree() doesn't work if "/etc/strongwan.d/ is owned by root but the neutron-vpn-agent is running on a different user (i.e. "neutron").
  The error message is:

  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher [req-a50cffcd-b59e-4aa3-a38c-80276e7855f2 bb02d9c6a9d142bdb9beb6dea7b71271 49748f1f979846ec9b05f100bffe30a8 - - -] Exception during message handling: [('/etc/strongswan.d/starter.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/starter.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/starter.conf'"), ('/etc/strongswan.d/tools.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tools.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tools.conf'"), ('/etc/strongswan.d/charon.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon.conf'"), ('/etc/strongswan.d/charon-logging.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon-logging.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon-logging.conf'"), ('/etc/strongswan.d/pool.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/pool.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/pool.conf'"), ('/etc/strongswan.d/imcv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/imcv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/imcv.conf'"), ('/etc/strongswan.d/tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tnc.conf'"), ('/etc/strongswan.d/charon/x509.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/x509.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/x509.conf'"), ('/etc/strongswan.d/charon/radattr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/radattr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/radattr.conf'"), ('/etc/strongswan.d/charon/pkcs8.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs8.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs8.conf'"), ('/etc/strongswan.d/charon/fips-prf.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/fips-prf.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/fips-prf.conf'"), ('/etc/strongswan.d/charon/smp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/smp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/smp.conf'"), ('/etc/strongswan.d/charon/eap-identity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-identity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-identity.conf'"), ('/etc/strongswan.d/charon/tnc-tnccs.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-tnccs.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-tnccs.conf'"), ('/etc/strongswan.d/charon/ldap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ldap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ldap.conf'"), ('/etc/strongswan.d/charon/dnskey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dnskey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dnskey.conf'"), ('/etc/strongswan.d/charon/sha2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha2.conf'"), ('/etc/strongswan.d/charon/tnc-pdp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-pdp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-pdp.conf'"), ('/etc/strongswan.d/charon/sshkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sshkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sshkey.conf'"), ('/etc/strongswan.d/charon/pkcs7.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs7.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs7.conf'"), ('/etc/strongswan.d/charon/eap-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-dynamic.conf'"), ('/etc/strongswan.d/charon/hmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/hmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/hmac.conf'"), ('/etc/strongswan.d/charon/xauth-eap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-eap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-eap.conf'"), ('/etc/strongswan.d/charon/des.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/des.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/des.conf'"), ('/etc/strongswan.d/charon/eap-ttls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-ttls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-ttls.conf'"), ('/etc/strongswan.d/charon/revocation.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/revocation.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/revocation.conf'"), ('/etc/strongswan.d/charon/eap-mschapv2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-mschapv2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-mschapv2.conf'"), ('/etc/strongswan.d/charon/ccm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ccm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ccm.conf'"), ('/etc/strongswan.d/charon/stroke.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/stroke.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/stroke.conf'"), ('/etc/strongswan.d/charon/rc2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/rc2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/rc2.conf'"), ('/etc/strongswan.d/charon/cmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/cmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/cmac.conf'"), ('/etc/strongswan.d/charon/pkcs11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs11.conf'"), ('/etc/strongswan.d/charon/pkcs1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs1.conf'"), ('/etc/strongswan.d/charon/eap-md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-md5.conf'"), ('/etc/strongswan.d/charon/openssl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/openssl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/openssl.conf'"), ('/etc/strongswan.d/charon/certexpire.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/certexpire.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/certexpire.conf'"), ('/etc/strongswan.d/charon/gmp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gmp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gmp.conf'"), ('/etc/strongswan.d/charon/coupling.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/coupling.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/coupling.conf'"), ('/etc/strongswan.d/charon/sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sql.conf'"), ('/etc/strongswan.d/charon/xcbc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xcbc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xcbc.conf'"), ('/etc/strongswan.d/charon/xauth-pam.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-pam.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-pam.conf'"), ('/etc/strongswan.d/charon/eap-gtc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-gtc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-gtc.conf'"), ('/etc/strongswan.d/charon/eap-aka.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka.conf'"), ('/etc/strongswan.d/charon/eap-sim-file.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-file.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-file.conf'"), ('/etc/strongswan.d/charon/soup.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/soup.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/soup.conf'"), ('/etc/strongswan.d/charon/addrblock.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/addrblock.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/addrblock.conf'"), ('/etc/strongswan.d/charon/pgp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pgp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pgp.conf'"), ('/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-pseudonym.conf'"), ('/etc/strongswan.d/charon/constraints.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/constraints.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/constraints.conf'"), ('/etc/strongswan.d/charon/pkcs12.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs12.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs12.conf'"), ('/etc/strongswan.d/charon/af-alg.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/af-alg.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/af-alg.conf'"), ('/etc/strongswan.d/charon/eap-simaka-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-sql.conf'"), ('/etc/strongswan.d/charon/curl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/curl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/curl.conf'"), ('/etc/strongswan.d/charon/socket-default.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/socket-default.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/socket-default.conf'"), ('/etc/strongswan.d/charon/pubkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pubkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pubkey.conf'"), ('/etc/strongswan.d/charon/blowfish.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/blowfish.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/blowfish.conf'"), ('/etc/strongswan.d/charon/gcm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcm.conf'"), ('/etc/strongswan.d/charon/xauth-generic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-generic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-generic.conf'"), ('/etc/strongswan.d/charon/tnc-imv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imv.conf'"), ('/etc/strongswan.d/charon/unity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/unity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/unity.conf'"), ('/etc/strongswan.d/charon/duplicheck.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/duplicheck.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/duplicheck.conf'"), ('/etc/strongswan.d/charon/aes.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/aes.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/aes.conf'"), ('/etc/strongswan.d/charon/md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md5.conf'"), ('/etc/strongswan.d/charon/eap-radius.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-radius.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-radius.conf'"), ('/etc/strongswan.d/charon/eap-aka-3gpp2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka-3gpp2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka-3gpp2.conf'"), ('/etc/strongswan.d/charon/kernel-netlink.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/kernel-netlink.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/kernel-netlink.conf'"), ('/etc/strongswan.d/charon/resolve.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/resolve.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/resolve.conf'"), ('/etc/strongswan.d/charon/eap-sim.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim.conf'"), ('/etc/strongswan.d/charon/attr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr.conf'"), ('/etc/strongswan.d/charon/agent.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/agent.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/agent.conf'"), ('/etc/strongswan.d/charon/ctr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ctr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ctr.conf'"), ('/etc/strongswan.d/charon/farp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/farp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/farp.conf'"), ('/etc/strongswan.d/charon/attr-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr-sql.conf'"), ('/etc/strongswan.d/charon/random.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/random.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/random.conf'"), ('/etc/strongswan.d/charon/ha.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ha.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ha.conf'"), ('/etc/strongswan.d/charon/eap-simaka-reauth.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-reauth.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-reauth.conf'"), ('/etc/strongswan.d/charon/nonce.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/nonce.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/nonce.conf'"), ('/etc/strongswan.d/charon/tnccs-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-dynamic.conf'"), ('/etc/strongswan.d/charon/tnc-imc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imc.conf'"), ('/etc/strongswan.d/charon/dhcp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dhcp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dhcp.conf'"), ('/etc/strongswan.d/charon/gcrypt.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcrypt.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcrypt.conf'"), ('/etc/strongswan.d/charon/eap-tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tnc.conf'"), ('/etc/strongswan.d/charon/led.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/led.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/led.conf'"), ('/etc/strongswan.d/charon/eap-tls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tls.conf'"), ('/etc/strongswan.d/charon/eap-peap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-peap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-peap.conf'"), ('/etc/strongswan.d/charon/tnccs-11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-11.conf'"), ('/etc/strongswan.d/charon/tnccs-20.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-20.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-20.conf'"), ('/etc/strongswan.d/charon/pem.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pem.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pem.conf'"), ('/etc/strongswan.d/charon/sha1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha1.conf'"), ('/etc/strongswan.d/charon/eap-sim-pcsc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-pcsc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-pcsc.conf'"), ('/etc/strongswan.d/charon/updown.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/updown.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/updown.conf'"), ('/etc/strongswan.d/charon/md4.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md4.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md4.conf'")]
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher Traceback (most recent call last):
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 142, in _dispatch_and_reply
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     executor_callback))
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 186, in _dispatch
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     executor_callback)
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 129, in _do_dispatch
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     result = func(ctxt, **new_args)
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 669, in vpnservice_updated
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.sync(context, [router] if router else [])
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_concurrency/lockutils.py", line 254, in inner
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     return f(*args, **kwargs)
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 823, in sync
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self._sync_vpn_processes(vpnservices, sync_router_ids)
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 847, in _sync_vpn_processes
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     process.update()
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 238, in update
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.enable()
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 256, in enable
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self.ensure_configs()
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 132, in ensure_configs
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     self._get_config_filename('strongswan.d'))
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 109, in copy_and_overwrite
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     shutil.copytree(from_path, to_path)
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher   File "/usr/lib64/python2.7/shutil.py", line 208, in copytree
  2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher     raise Error, errors

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1586986/+subscriptions
Follow ups

[Bug 1586986] Re: vpnaas: Copy strongswan.d needs root rights
From: OpenStack Infra, 2016-05-31