Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/318974
Change subject: fix permissions on changepw script, let all users run it
......................................................................
fix permissions on changepw script, let all users run it
Any user (on salt masters) should be able to run this script,
avoiding the need for sudo rules for this. It doesnt allow anything
more than the existing access, since you still need to know the
mgmt password to do anything. (just like when you'd SSH to it directly)
Change-Id: I9b98f1eeee8a2121dabd4248a09c85bf226c4cf2
---
M modules/mgmt/manifests/init.pp
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/74/318974/1
diff --git a/modules/mgmt/manifests/init.pp b/modules/mgmt/manifests/init.pp
index 0a7a896..8347955 100644
--- a/modules/mgmt/manifests/init.pp
+++ b/modules/mgmt/manifests/init.pp
@@ -7,7 +7,7 @@
ensure => present,
}
file { '/usr/local/bin/changepw':
- mode => '0500',
+ mode => '0555',
owner => 'root',
group => 'root',
source => 'puppet:///modules/mgmt/changepw',
--
To view, visit https://gerrit.wikimedia.org/r/318974
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I9b98f1eeee8a2121dabd4248a09c85bf226c4cf2
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
