openstack/nova
Code Issues Proposed changes

Fix authorized_keys file permissions

Browse Source 
Explicitly set the file permissions to be 0600

Fixes LP# 1107908

Change-Id: Ife44deff41959180d31e7e88c29233e9b8cb0af2
This commit is contained in:
Davanum Srinivas 2013-01-28 20:23:53 -05:00
parent ce09c50c92
commit f57b61de71
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nova/tests/test_virt_disk.py
View File

@ -67,7 +67,7 @@ class VirtDiskTest(test.TestCase):
"key was injected by Nova\nmysshkey\n", "key was injected by Nova\nmysshkey\n",
'gid': 100, 'gid': 100,
'uid': 100, 'uid': 100,
'mode': 0700}) 'mode': 0600})
vfs.teardown() vfs.teardown()
@ -101,7 +101,7 @@ class VirtDiskTest(test.TestCase):
"key was injected by Nova\nmysshkey\n", "key was injected by Nova\nmysshkey\n",
'gid': 100, 'gid': 100,
'uid': 100, 'uid': 100,
'mode': 0700}) 'mode': 0600})
vfs.teardown() vfs.teardown()

1
nova/virt/disk/api.py
View File

@ -443,6 +443,7 @@ def _inject_key_into_fs(key, fs):
]) ])
_inject_file_into_fs(fs, keyfile, key_data, append=True) _inject_file_into_fs(fs, keyfile, key_data, append=True)
fs.set_permissions(keyfile, 0600)
_setup_selinux_for_keys(fs, sshdir) _setup_selinux_for_keys(fs, sshdir)