Allow changing the mysql-config-file group-ownership#1284
Allow changing the mysql-config-file group-ownership#1284michaeltlombardi merged 2 commits intopuppetlabs:masterfrom
Conversation
4d5e2f8 to
97ef2ca
Compare
Codecov Report
@@ Coverage Diff @@
## master #1284 +/- ##
=========================================
Coverage ? 14.53%
=========================================
Files ? 19
Lines ? 860
Branches ? 0
=========================================
Hits ? 125
Misses ? 735
Partials ? 0Continue to review full report at Codecov.
|
e7c8746 to
bff135d
Compare
|
Hey @unki, thanks for this patch! Can you rebase your PR on latest master and repush? I believe that may fix your CI issue. |
bff135d to
e911dc0
Compare
|
Hey @unki, thanks also for this... seems like we had the same thoughts. What I don't get, is why you - in your second commit - decided not to use Cheers & thanks in advance :) |
With my PR #1278 it's now possible to change the file-permission-mode of the mysql-config-file - e.g.
my.cnf.If you are trying now to apply a rather strict file-mode like
0600- in combination with Puppet's default file-ownershiproot:root- it will lead to issues with MariaDB not being able to access the config-file after it has switched the processes to the service-user (e.g.mysql).Therefor I would propose additionally using
$mysql::server::mysql_groupas the mysql-config-file's group-ownership. Then restricting access would be easy done with a0640file-mode.