ownership for local_setting configuration file for dashboard?

asked 2018-07-25 01:04:48 -0500

artik gravatar image

Hi,

In the security guidelines for openstack, following command is mentioned. It is mentioned that user and group ownership of the config file is set to root and horizon respectively.

stat -L -c "%U %G" /etc/openstack-dashboard/local_settings.py | egrep "root horizon"

However on my Openstack queens setup, I have observed that there is a following file /etc/openstack-dashboard/local_settings which is linked from the file /usr/share/openstack-dashboard/openstack_dashboard/local/local_settings.py

The ownership of this file is : -rw-r----- 1 apache apache 30761 Jul 25 10:57 local_settings

My question is if the ownership of this file should be root:horizon Or apache:apache ?

edit retag flag offensive close merge delete