[Bug 1768560] Re: Netplan generates systemd-networkd config files with incorrect file permissions

[Mathieu Trudel-Lapierre]

Yes, should enforce proper permissions on the generated files.

** Changed in: netplan.io (Ubuntu)
       Status: Confirmed => Triaged

** Changed in: netplan.io (Ubuntu)
   Importance: Undecided => Medium

** Also affects: netplan
   Importance: Undecided
       Status: New

** Changed in: netplan
       Status: New => Triaged

** Changed in: netplan
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1768560

Title:
  Netplan generates systemd-networkd config files with incorrect file
  permissions

Status in netplan:
  Triaged
Status in netplan.io package in Ubuntu:
  Triaged

Bug description:
  Hello,

  If the umask is set to 077 in /etc/profile and /etc/bash.bashrc (to
  comply with CIS-CAT recommendations), the files that netplan generates
  in /run/systemd/network are created as 0600 and systemd-networkd will
  not start.

  $ ls -l /run/systemd/network
  total 4
  -rw------- 1 root root 152 May  2 14:14 10-netplan-eth0.network

  $ sudo systemctl start systemd-networkd      
  Job for systemd-networkd.service failed because the control process exited with error code.
  See "systemctl status systemd-networkd.service" and "journalctl -xe" for details.

  $ sudo journalctl -xe --no-pager --unit=systemd-networkd.service

  May 02 14:39:45 ubuntu1804 systemd[1]: Starting Network Service...
  -- Subject: Unit systemd-networkd.service has begun start-up
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has begun starting up.
  May 02 14:39:45 ubuntu1804 systemd-networkd[8724]: Could not load configuration files: Permission denied
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Main process exited, code=exited, status=1/FAILURE
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Failed with result 'exit-code'.
  May 02 14:39:45 ubuntu1804 systemd[1]: Failed to start Network Service.
  -- Subject: Unit systemd-networkd.service has failed
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has failed.

  
  If I modify the permissions, it will start fine.
  $ sudo chmod 0644 /run/systemd/network/*.network
  $ sudo systemctl start systemd-networkd
  $ sudo systemctl status systemd-networkd
  * systemd-networkd.service - Network Service
     Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2018-05-02 14:43:20 UTC; 20s ago

  
  This is on Ubuntu 18.04 with netplan.io 0.36.1, which is being executed by cloud-init 18.2-14-g6d48d265-0ubuntu1.

  Thank you,
  Corey Melanson

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1768560/+subscriptions