openstack
/
openstack-ansible-haproxy_server
Code Issues Proposed changes

Use correct permissions for haproxy log mount 

With [1] a regression was introduced, where incorrect permissions were
applied to a bind mount corrupting access to /dev/log globally on hosts
where haproxy was running.

Default permissions are 0666 for /dev/log when it's managed by journald.

[1] https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/888143
Closes-Bug: #2055178

Change-Id: Ib8b9e4dea0ecd5d35f0e872dfaa0f2ec837a98f8
This commit is contained in:
Dmitriy Rabotyagov 2024-02-27 19:46:08 +01:00
parent 16ab20815f
commit ed981ce09a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/haproxy_post_install.yml
View File

@ -77,7 +77,7 @@
path: "{{ haproxy_log_mount_point }}"
access_time: preserve
modification_time: preserve
mode: "0755"
mode: "0666"
- name: Make log socket available to chrooted filesystem
mount: