/var/cache/salt installed 755 by deb, not installed by rpm; causes commands/clients to fail

[dmick]

Accessing the master through client.LocalClient fails even when the user is in the ACL list, but only on RPM systems

The root of the problem is that /var/cache/salt is created by the Debian packaging (as mode 0755), but is not created by the RPM packaging, and the master running as root creates the dirs as 770.

I'm not sure of the correct fix, but it seems like individual files in /var/cache/salt are carefully permission-managed, so perhaps the right answer is to add /var/cache/salt to the RPM packaging?

[dmick]

@terminalmage forrest in #salt said to tag you on this one; I can easily make the change but it might require some design/thought

[terminalmage]

Yeah, it's easier to create the package with those permissions. Files and directories will be created with the permissions from the umask otherwise.

[dmick]

I said ACL list. (hangs head in shame)

[terminalmage]

Hahahaha

[basepi]

As long as you don't say "PIN number" we can still be friends. ;)

[terminalmage]

@dmick I accidentally closed this from an external tool when I closed the pull request I had opened to update the RPM spec file. I'm going to leave this issue closed though, since the new builds with /var/cache/salt in them have been submitted as epel-testing candidates.

Thanks for reporting!

[dmick]

OK. Thanks for the update.

[ChristinaMeno]

@terminalmage I am looking for this fix in any of the latest releases and can't seem to find it. Is this intentional?
git tag --contains 5f99316
nothing
git branch --contains 5f99316
develop

Is this intentional ?

[basepi]

@GregMeno 2014.1 doesn't get merged forward into the other branches. Thus, the commit SHA will be different in those branches. I expect that @terminalmage made the change separately in those branches. I'll check with him.

[terminalmage]

@GregMeno: @basepi is correct. We pretty much just keep the spec file up to date in develop. However, the current build in EPEL contains this fix.