Revision 23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c authored by Jason Tedor on 29 August 2017, 00:47:42 UTC, committed by Jason Tedor on 29 August 2017, 00:49:49 UTC
When creating the keystore explicitly (from executing
elasticsearch-keystore create) or implicitly (for plugins that require
the keystore to be created on install) on an Elasticsearch package
installation, we are running as the root user. This leaves
/etc/elasticsearch/elasticsearch.keystore having the wrong ownership
(root:root) so that the elasticsearch user can not read the keystore on
startup. This commit adds setgid to /etc/elasticsearch on package
installation so that when executing this directory (as we would when
creating the keystore), we will end up with the correct ownership
(root:elasticsearch). Additionally, we set the permissions on the
keystore to be 660 so that the elasticsearch user via its group can read
this file on startup.

Relates #26412
1 parent d6a7e25
History
File Mode Size
.github
benchmarks
buildSrc
client
core
dev-tools
distribution
docs
modules
plugins
qa
rest-api-spec
test
.dir-locals.el -rw-r--r-- 3.3 KB
.editorconfig -rw-r--r-- 177 bytes
.gitignore -rw-r--r-- 744 bytes
.projectile -rw-r--r-- 840 bytes
CONTRIBUTING.md -rw-r--r-- 10.0 KB
GRADLE.CHEATSHEET -rw-r--r-- 343 bytes
LICENSE.txt -rw-r--r-- 11.1 KB
NOTICE.txt -rw-r--r-- 150 bytes
README.textile -rw-r--r-- 9.1 KB
TESTING.asciidoc -rw-r--r-- 20.8 KB
Vagrantfile -rw-r--r-- 10.6 KB
build.gradle -rw-r--r-- 18.5 KB
gradle.properties -rw-r--r-- 24 bytes
settings.gradle -rw-r--r-- 5.0 KB

README.textile

back to top