#9734 Strange permissions on the alt/live-respins directory
Closed: Fixed 3 years ago by mohanboddu. Opened 3 years ago by tibbs.

  • Describe the issue
    The permissions on the alt/live-respins and the files within are all 0765, which is somewhat odd:
[root@pubmirror1 ~]# rsync rsync://dl-tier1.fedoraproject.org/fedora-buffet/alt/live-respins
[...]
You have connected to dl-iad01.fedoraproject.org

drwxrw-r-x         12,288 2020/09/01 18:45:43 .
-rwxrw-r-x          1,311 2020/09/01 18:25:19 CHECKSUM512-20200901
-rwxrw-r-x  2,285,010,944 2020/09/01 15:58:47 F32-CINN-x86_64-LIVE-20200901.iso
-rwxrw-r-x         22,269 2020/09/01 18:45:25 F32-CINN-x86_64-LIVE-20200901.torrent
[...]

This somehow doesn't cause problems when I mirror from the masters, but seems to cause problems for sites downstream of me:

rsync: [sender] link_stat "/alt/live-respins/CHECKSUM512-20200901" (in fedora-buffet0) failed: Permission denied (13)

and so on.

I saw this a while ago and pinged on IRC; things were fixed up (to, I think, 02755 or 02775), but at some point in the past few days they reverted.

  • When do you need this? (YYYY/MM/DD)
    Soonish would be nice so that my second mirror can catch up, but obviously this is not a massively critical issue.

  • When is this no longer needed or useful? (YYYY/MM/DD)
    We probably always want sane permissions.

  • If we cannot complete your request, what is the impact?
    Random mirroring issues for the rare folks who mirror alt.


we have been setting them for 765 for months so not only I can change things but the members of the hosted-content group could change files as needed.

But denying group execute on a directory, while still allowing user and world execute is rather odd. Odd enough that it breaks downstream mirroring. Mode 0775 on the directory, sure, but I don't see a case for 0765.

ok future sets will be 755
sorry about the issues

Metadata Update from @mohanboddu:
- Issue tagged with: low-trouble, medium-gain, ops

3 years ago

@jbwillia Can you fix them and close this ticket? Or do you want me to fix them?

go ahead and fix it on the server please

Done.

Please make sure you set it right in the next sync.

Thanks.

Metadata Update from @mohanboddu:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
Ops Status: Done