OpenSearch/distribution
Jason Tedor 7a035f5f84 setgid on /etc/elasticearch on package install
When creating the keystore explicitly (from executing
elasticsearch-keystore create) or implicitly (for plugins that require
the keystore to be created on install) on an Elasticsearch package
installation, we are running as the root user. This leaves
/etc/elasticsearch/elasticsearch.keystore having the wrong ownership
(root:root) so that the elasticsearch user can not read the keystore on
startup. This commit adds setgid to /etc/elasticsearch on package
installation so that when executing this directory (as we would when
creating the keystore), we will end up with the correct ownership
(root:elasticsearch). Additionally, we set the permissions on the
keystore to be 660 so that the elasticsearch user via its group can read
this file on startup.

Relates #26412
2017-08-28 20:47:42 -04:00
..
bwc Build: Add git hashes used as build metadata (#26397) 2017-08-28 14:10:06 -07:00
deb Rename CONF_DIR to ES_PATH_CONF 2017-08-15 06:19:06 +09:00
integ-test-zip Revert shading for the low level rest client (#26367) 2017-08-25 14:13:12 -05:00
rpm Rename CONF_DIR to ES_PATH_CONF 2017-08-15 06:19:06 +09:00
src/main setgid on /etc/elasticearch on package install 2017-08-28 20:47:42 -04:00
tar Tests: Change rest test extension from .yaml to .yml (#24659) 2017-05-16 17:24:35 -07:00
tools Settings: Move keystore creation to plugin installation (#26329) 2017-08-24 12:12:47 -07:00
zip Tests: Change rest test extension from .yaml to .yml (#24659) 2017-05-16 17:24:35 -07:00
build.gradle Rename CONF_DIR to ES_PATH_CONF 2017-08-15 06:19:06 +09:00