Allow opensearch-dashboard user to read its config (opensearch-projec…

…t#4038) Signed-off-by: Romain Tartière <[email protected]> Signed-off-by: Peter Zhu <[email protected]>
peterzhuamazon · Mar 14, 2024 · 15aeeb4 · 15aeeb4
1 parent 4f3baff
commit 15aeeb4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst b/scripts/pkg/build_templates/opensearch-dashboards/deb/debian/postinst
@@ -41,6 +41,7 @@ echo " If you are configuring tools that require read access to the OpenSearch D
 echo " For more information, see https://github.com/opensearch-project/opensearch-build/pull/4043"
 
 # Set ownership and permissions
+chown -R root.opensearch-dashboards ${config_dir}
 chmod -R u=rwX,g=rX,o= ${config_dir}
 
 chown -R opensearch-dashboards.adm ${log_dir}

diff --git a/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec b/scripts/pkg/build_templates/opensearch-dashboards/rpm/opensearch-dashboards.rpm.spec
@@ -83,6 +83,7 @@ exit 0
 
 %post
 set -e
+chown -R root.%{name} %{config_dir}
 # Reload systemctl daemon
 if command -v systemctl > /dev/null; then
     systemctl daemon-reload