[Bug 861459] [NEW] /etc/nova/nova-compute.conf not owned by nova

[Scott Moser]

Public bug reported:

On a freshly installed system, I ran:
 apt-get install -y cloud-utils euca2ools glance nova-api nova-common nova-compute-lxc nova-doc nova-network nova-objectstore nova-scheduler python-greenlet python-mysqldb python-nova rabbitmq-server unzip qemu-kvm

$ ls -l /etc/nova/
total 12
-rw-r--r-- 1 root root 3080 2011-09-23 13:35 api-paste.ini
-rw-r--r-- 1 root root   19 2011-09-23 14:25 nova-compute.conf
-rw------- 1 nova root  276 2011-09-23 13:35 nova.conf

There are 2 possible issues I see here:
a.) nova-compute.conf is world readable and root owned.  that may not be an issue.
   Note, though, in nova-common.postinst, nova.conf is expllictly set to nova:nova and 600. The other files in that dir are not touched.  That may well be by design.

b.) in the apt output I see:

Setting up nova-common (2011.3-0ubuntu2) ...
Adding system user `nova' (UID 107) ...
Adding new user `nova' (UID 107) with group `nogroup' ...
Not creating home directory `/var/lib/nova'.
[Errno 2] No such file or directory: '/etc/nova/nova-compute.conf'
ERROR:: Unable to open flagfile: /etc/nova/nova-compute.conf
/usr/lib/python2.7/dist-packages/migrate/changeset/schema.py:124: MigrateDeprecationWarning: Passing a Column object to alter_column is deprecated. Just pass in keyword parameters instead.
  MigrateDeprecationWarning

nova-common's /etc/nova/nova.conf has '--flagfile=/etc/nova/nova-
compute.conf' and nova-compute-lxc (or any nova-compute for that matter)
has not been installed yet.  So this is probably just ignorable.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: nova-compute-lxc 2011.3-0ubuntu2
ProcVersionSignature: Ubuntu 3.0.0-12.19-server 3.0.4
Uname: Linux 3.0.0-12-server x86_64
ApportVersion: 1.23-0ubuntu1
Architecture: amd64
Date: Wed Sep 28 10:26:52 2011
NovaConf: Error: [Errno 13] Permission denied: '/etc/nova/nova.conf'
PackageArchitecture: all
ProcEnviron:
 LANGUAGE=en_US:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: nova
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: nova (Ubuntu)
     Importance: Low
         Status: Confirmed


** Tags: amd64 apport-bug oneiric

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/861459

Title:
  /etc/nova/nova-compute.conf not owned by nova

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova/+bug/861459/+subscriptions