[MediaWiki-commits] [Gerrit] cassandra: restrict data directory permissions - change (operations/puppet)

2015-07-28 Thread Filippo Giunchedi (Code Review) 
Filippo Giunchedi has submitted this change and it was merged.

Change subject: cassandra: restrict data directory permissions
..


cassandra: restrict data directory permissions

Bug: T106133
Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
---
M modules/cassandra/manifests/init.pp
1 file changed, 17 insertions(+), 0 deletions(-)

Approvals:
  Filippo Giunchedi: Verified; Looks good to me, approved
  Mobrovac: Looks good to me, but someone else must approve



diff --git a/modules/cassandra/manifests/init.pp 
b/modules/cassandra/manifests/init.pp
index f87d7bb..27ad74e 100644
--- a/modules/cassandra/manifests/init.pp
+++ b/modules/cassandra/manifests/init.pp
@@ -307,6 +307,23 @@
 ensure  = directory,
 owner   = 'cassandra',
 group   = 'cassandra',
+mode= '0750',
+require = Package['cassandra'],
+}
+
+file { $commitlog_directory:
+ensure  = directory,
+owner   = 'cassandra',
+group   = 'cassandra',
+mode= '0750',
+require = Package['cassandra'],
+}
+
+file { $saved_caches_directory:
+ensure  = directory,
+owner   = 'cassandra',
+group   = 'cassandra',
+mode= '0750',
 require = Package['cassandra'],
 }
 

-- 
To view, visit https://gerrit.wikimedia.org/r/225300
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi fgiunch...@wikimedia.org
Gerrit-Reviewer: Eevans eev...@wikimedia.org
Gerrit-Reviewer: Filippo Giunchedi fgiunch...@wikimedia.org
Gerrit-Reviewer: GWicke gwi...@wikimedia.org
Gerrit-Reviewer: Mobrovac mobro...@wikimedia.org
Gerrit-Reviewer: jenkins-bot 

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

[MediaWiki-commits] [Gerrit] cassandra: restrict data directory permissions - change (operations/puppet)

2015-07-17 Thread Filippo Giunchedi (Code Review) 
Filippo Giunchedi has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/225300

Change subject: cassandra: restrict data directory permissions
..

cassandra: restrict data directory permissions

Bug: T106133
Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
---
M modules/cassandra/manifests/init.pp
1 file changed, 18 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/00/225300/1

diff --git a/modules/cassandra/manifests/init.pp 
b/modules/cassandra/manifests/init.pp
index f87d7bb..d14f21d 100644
--- a/modules/cassandra/manifests/init.pp
+++ b/modules/cassandra/manifests/init.pp
@@ -357,6 +357,24 @@
 require = Package['cassandra'],
 }
 
+file { $data_file_directories:
+  owner = 'cassandra',
+  group = 'cassandra',
+  mode  = '0750',
+}
+
+file { $commitlog_directory:
+  owner = 'cassandra',
+  group = 'cassandra',
+  mode  = '0750',
+}
+
+file { $saved_caches_directory:
+  owner = 'cassandra',
+  group = 'cassandra',
+  mode  = '0750',
+}
+
 # This Puppet module does not support
 # PropertyFileSnitch, which uses these files.
 file { ['/etc/cassandra/cassandra-topology.properties', 
'/etc/cassandra/cassandra-topology.yaml']:

-- 
To view, visit https://gerrit.wikimedia.org/r/225300
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I59d8552cf71890154b127b8f847b9e035fb80b69
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi fgiunch...@wikimedia.org

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits