From 0bc17f2f570c1ebd0285406332aa512d537aa283 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Romain=20Tarti=C3=A8re?= Date: Mon, 18 Sep 2023 17:36:47 -1000 Subject: [PATCH] Allow opensearch-dashboard user to read its config (#4038) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Romain Tartière Signed-off-by: Peter Zhu --- .../build_templates/opensearch-dashboards/deb/debian/postinst | 1 + .../opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec | 1 + 2 files changed, 2 insertions(+) diff --git a/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst b/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst index 08f0094078..93a566971d 100755 --- a/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst +++ b/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst @@ -37,6 +37,7 @@ echo "### You can start opensearch-dashboards service by executing" echo " sudo systemctl start opensearch-dashboards.service" # Set ownership and permissions +chown -R root.opensearch-dashboards ${config_dir} chmod -R u=rwX,g=rX,o= ${config_dir} chown -R opensearch-dashboards.adm ${log_dir} diff --git a/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec b/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec index df8e1bd064..53273b9ae0 100644 --- a/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec +++ b/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec @@ -76,6 +76,7 @@ exit 0 %post set -e +chown -R root.%{name} %{config_dir} # Reload systemctl daemon if command -v systemctl > /dev/null; then systemctl daemon-reload