[Bug 1768560] Re: Netplan generates systemd-networkd config files with incorrect file permissions

[Launchpad Bug Tracker]

*** This bug is a duplicate of bug 1736965 ***
    https://bugs.launchpad.net/bugs/1736965

This bug was fixed in the package netplan.io - 0.40

---------------
netplan.io (0.40) cosmic; urgency=medium

  * New upstream release:
    - networkd: route source is PreferredSource= not From=
    - Improve NetworkManager error reporting on unrenderable routes.
    - Don't render ipv4 dns-search unless we have an ipv4 address.
      (LP: #1786726)
    - Set permissive umask on networkd .network, .link and .netdev files
      (LP: #1736965, LP: #1768560)
    - Fix support for link-scope routes. (LP: #1747455)
    - Update man pages for deletion of replug code.
    - Spell Gratuitous ARP correctly and make it work. (LP: #1756701)
    - Many typo fixes for documentation. (LP: #1783940)
    - Various build system fixes.
    - Fix integration tests:
      - iproute2 output changes for link-scope routes
      - fix stability of networkd igmp-resend test
      - fix manual_addresses test now that networkd lists ~. domain
    - Deduplicate code for parsing interface options
    - Add support for optional-addresses.

 -- Mathieu Trudel-Lapierre <cyphermox at ubuntu.com>  Thu, 13 Sep 2018
17:29:41 -0400

** Changed in: netplan.io (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1768560

Title:
  Netplan generates systemd-networkd config files with incorrect file
  permissions

Status in netplan:
  Triaged
Status in netplan.io package in Ubuntu:
  Fix Released

Bug description:
  Hello,

  If the umask is set to 077 in /etc/profile and /etc/bash.bashrc (to
  comply with CIS-CAT recommendations), the files that netplan generates
  in /run/systemd/network are created as 0600 and systemd-networkd will
  not start.

  $ ls -l /run/systemd/network
  total 4
  -rw------- 1 root root 152 May  2 14:14 10-netplan-eth0.network

  $ sudo systemctl start systemd-networkd      
  Job for systemd-networkd.service failed because the control process exited with error code.
  See "systemctl status systemd-networkd.service" and "journalctl -xe" for details.

  $ sudo journalctl -xe --no-pager --unit=systemd-networkd.service

  May 02 14:39:45 ubuntu1804 systemd[1]: Starting Network Service...
  -- Subject: Unit systemd-networkd.service has begun start-up
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has begun starting up.
  May 02 14:39:45 ubuntu1804 systemd-networkd[8724]: Could not load configuration files: Permission denied
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Main process exited, code=exited, status=1/FAILURE
  May 02 14:39:45 ubuntu1804 systemd[1]: systemd-networkd.service: Failed with result 'exit-code'.
  May 02 14:39:45 ubuntu1804 systemd[1]: Failed to start Network Service.
  -- Subject: Unit systemd-networkd.service has failed
  -- Defined-By: systemd
  -- Support: http://www.ubuntu.com/support
  -- 
  -- Unit systemd-networkd.service has failed.

  
  If I modify the permissions, it will start fine.
  $ sudo chmod 0644 /run/systemd/network/*.network
  $ sudo systemctl start systemd-networkd
  $ sudo systemctl status systemd-networkd
  * systemd-networkd.service - Network Service
     Loaded: loaded (/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2018-05-02 14:43:20 UTC; 20s ago

  
  This is on Ubuntu 18.04 with netplan.io 0.36.1, which is being executed by cloud-init 18.2-14-g6d48d265-0ubuntu1.

  Thank you,
  Corey Melanson

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1768560/+subscriptions