From ecdb75f15cd61142be60b2dfbe34787d84d8e83e Mon Sep 17 00:00:00 2001 From: Ben Nemec Date: Thu, 4 Jan 2018 21:53:35 +0000 Subject: [PATCH] Remove /var/named permission tweaking This configuration really belongs in puppet-designate. The logic for fixing the permissions is being added there in I09e8799f0b2a4113833983d67b3c4d40a0355933 bp designate-support Change-Id: I71f8004c8d0a4135306890ed539447fe3273ff2c Depends-On: I09e8799f0b2a4113833983d67b3c4d40a0355933 --- manifests/bind.pp | 8 -------- 1 file changed, 8 deletions(-) diff --git a/manifests/bind.pp b/manifests/bind.pp index 5ec430f85..262db8b8c 100644 --- a/manifests/bind.pp +++ b/manifests/bind.pp @@ -29,14 +29,6 @@ class openstack_integration::bind { } } - # /var/named is root:named on RedHat and /var/cache/bind is root:bind on - # Debian. Both groups only have read access but require write permission in - # order to be able to use rndc addzone/delzone commands that Designate uses. - file { $::dns::params::vardir: - mode => 'g+w', - require => Package[$dns::params::dns_server_package] - } - # ::dns creates the rndc key but not a rndc.conf. # Contribute this in upstream ::dns ? file { '/etc/rndc.conf':