Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-67261

Keyfile mode 640 should pass permission check

    XMLWordPrintableJSON

Details

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major - P3 Major - P3
    • None
    • None
    • None
    • None
    • ALL
    • Hide

      Set file owner to root and group to the group of mongo user.

      Set file mode to 640.

      Show
      Set file owner to root and group to the group of mongo user. Set file mode to 640.

    Description

      Keyfile owned by root:mongo with filesystem mode 640 should really pass the permissions check described here: https://github.com/mongodb/mongo/blob/5bbadc66ed462aed3cc4f5635c5003da6171c25d/src/mongo/db/auth/security_file.cpp#L80

      Attachments

        Activity

          People

            chris.kelly@mongodb.com Chris Kelly
            lauri.vosandi@gmail.com Lauri Võsandi
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: