#819 Make files on fedorahosted/releases/ readable automatically
Closed: Fixed None Opened 15 years ago by toshio.

Since fedorahosted.org/releases/* is intended for hosted projects to make releases to the world, is there any problem with using acls or a cron job to automatically make all files under /releases/ readable by apache? We had a problem where liberation fonts tarballs were being uploaded with mode 0600 so people attempting to download the font tarballs were getting Forbidden errors:

https://bugzilla.redhat.com/show_bug.cgi?id=461282


One solution which i see to the above issue it to add
chmod a+r /srv/web/releases at the end of the /usr/bin/run-git script.
Mike,
do you think this is ok?

/usr/bin/run-git wouldn't catch uploads by people who have access to login to fedorahosted. OTOH, those people would have access to fix the permissions on the files by logging in to fedorahosted.org if there was a problem.

Perhaps adding a cron as you earlier suggested would be better, say it would run once in a day and do the chmod thing.

This is done.
There is now a cron on hosted1 which reads.

Puppet Name: make-release-readable

10 10 * * * /bin/chmod -R a+r /srv/web/releases/ > /dev/null

I hope that is what you wanted.

Login to comment on this ticket.

Metadata