tree 225fb71183676936a7e0257b0d64ce48dd6d1e2c
parent a961803b5614794f1bd7fbea41636bb62706e557
author Oleksandr Bryndzii <obryndzii@mirantis.com> 1534936312 +0300
committer Oleksandr Bryndzii <obryndzii@mirantis.com> 1535013907 +0300

Update glance config files permissions

The /etc/glance/*.conf|*.ini files and directories are world readable:
-rw-r--r-- 1 root glance glance-api.conf
-rw-r--r-- 1 root glance glance-api-paste.ini
drwxr-xr-x   2 root glance metadefs/
etc.
This may lead to sensitive information leakage and cloud compromise.

Set glance config files and directories permissions to 0640 and 0750 accordingly.
Set glance config files and directories owner and group to root:glance.
Add the correct_permissions_files and correct_permissions_dirs states.

Change-Id: Iad4b6433d55051cfb4f44ead1efaafc48dc4f5b9
Related-Prod: https://mirantis.jira.com/browse/PROD-22092