~andreserl/maas/packaging.fixes

[r=jtv][bug=1089802][author=jtv] Backport packaging r159: Make maas_cluster.conf non-world-readable, now that it contains the cluster UUID.

added added

removed removed

if [ "$1" = "configure" ] && [ -z "$2" ]; then

# logging

create_log_dir

# The local celery config may contain a private cluster UUID. Only

# maas can read it; only root can write it.

chown root:maas /etc/maas/maas_local_celeryconfig_cluster.py

chmod 0640 /etc/maas/maas_local_celeryconfig_cluster.py

configure_maas_tgt

if [ "$1" = "configure" ]; then

# These config files may contain a private cluster UUID. Only maas

# can read them; only root can write them

chown root:maas \

/etc/maas/maas_local_celeryconfig_cluster.py \

/etc/maas/maas_cluster.conf

chmod 0640 \

100

/etc/maas/maas_local_celeryconfig_cluster.py \

101

/etc/maas/maas_cluster.conf

102

100

103

configure_cluster_uuid

101

104

102

105