[Bug 1768560] [NEW] Netplan generates systemd-networkd config files with incorrect file permissions

[Corey Melanson]

Public bug reported:

Hello,

If the umask is set to 077 in /etc/profile and /etc/bash.bashrc (to
comply with CIS-CAT recommendations), the files that netplan generates
in /run/systemd/network are created as 0600 and systemd-networkd will
not start.

$ ls -l /run/systemd/network
total 4
-rw------- 1 root root 152 May  2 14:14 10-netplan-eth0.network

$ sudo systemctl start systemd-networkd      
Job for systemd-networkd.service failed because the control process exited with error code.
See "systemctl status systemd-networkd.service" and "journalctl -xe" for details.

$ sudo journalctl -xe --no-pager --unit=systemd-networkd.service

May 02 14:39:45 ubuntu1804 systemd[1]: Starting Network Service...
-- Subject: Unit systemd-networkd.service has begun start-up
-- Defined-By: systemd
-- Support: http://www.ubuntu.com/support
-- 
-- Unit systemd-networkd.service has begun starting up.
May 02 14:39:45 ubuntu1804 systemd-networkd[8724]: Could not load configuration files: Permission denied
May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Main process exited, code=exited, status=1/FAILURE
May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Failed with result 'exit-code'.
May 02 14:39:45 ubuntu1804 systemd[1]: Failed to start Network Service.
-- Subject: Unit systemd-networkd.service has failed
-- Defined-By: systemd
-- Support: http://www.ubuntu.com/support
-- 
-- Unit systemd-networkd.service has failed.


If I modify the permissions, it will start fine.
$ sudo chmod 0644 /run/systemd/network/*.network
$ sudo systemctl start systemd-networkd
$ sudo systemctl status systemd-networkd
* systemd-networkd.service - Network Service
   Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
   Active: active (running) since Wed 2018-05-02 14:43:20 UTC; 20s ago


This is on Ubuntu 18.04 with netplan.io 0.36.1, which is being executed by cloud-init 18.2-14-g6d48d265-0ubuntu1.

Thank you,
Corey Melanson

** Affects: netplan.io (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1768560

Title:
  Netplan generates systemd-networkd config files with incorrect file
  permissions

Status in netplan.io package in Ubuntu:
  New

Bug description:
  Hello,

  If the umask is set to 077 in /etc/profile and /etc/bash.bashrc (to
  comply with CIS-CAT recommendations), the files that netplan generates
  in /run/systemd/network are created as 0600 and systemd-networkd will
  not start.

  $ ls -l /run/systemd/network
  total 4
  -rw------- 1 root root 152 May  2 14:14 10-netplan-eth0.network

  $ sudo systemctl start systemd-networkd      
  Job for systemd-networkd.service failed because the control process exited with error code.
  See "systemctl status systemd-networkd.service" and "journalctl -xe" for details.

  $ sudo journalctl -xe --no-pager --unit=systemd-networkd.service

  May 02 14:39:45 ubuntu1804 systemd[1]: Starting Network Service...
  -- Subject: Unit systemd-networkd.service has begun start-up
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has begun starting up.
  May 02 14:39:45 ubuntu1804 systemd-networkd[8724]: Could not load configuration files: Permission denied
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Main process exited, code=exited, status=1/FAILURE
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Failed with result 'exit-code'.
  May 02 14:39:45 ubuntu1804 systemd[1]: Failed to start Network Service.
  -- Subject: Unit systemd-networkd.service has failed
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has failed.

  
  If I modify the permissions, it will start fine.
  $ sudo chmod 0644 /run/systemd/network/*.network
  $ sudo systemctl start systemd-networkd
  $ sudo systemctl status systemd-networkd
  * systemd-networkd.service - Network Service
     Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2018-05-02 14:43:20 UTC; 20s ago

  
  This is on Ubuntu 18.04 with netplan.io 0.36.1, which is being executed by cloud-init 18.2-14-g6d48d265-0ubuntu1.

  Thank you,
  Corey Melanson

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1768560/+subscriptions