Change permissions for libvirtd unix sockets
Current permissions seemed to be too restrictive and we must
revert back to the default set by Libvirtd.
Change-Id: Ib999244bfb316c6b54acec317f26fb40657c866b
Closes-Issue: https://mirantis.jira.com/browse/PROD-23842
diff --git a/nova/files/pike/libvirtd.conf.Debian b/nova/files/pike/libvirtd.conf.Debian
index aab457c..fdbcf9e 100644
--- a/nova/files/pike/libvirtd.conf.Debian
+++ b/nova/files/pike/libvirtd.conf.Debian
@@ -26,8 +26,8 @@
{%- set key_file = compute.libvirt.tls.key_file %}
{%- set cert_file = compute.libvirt.tls.cert_file %}
{%- set ca_file = compute.libvirt.tls.ca_file %}
-{%- set unix_sock_ro_perms = "0000" %}
-{%- set unix_sock_rw_perms = "0000" %}
+{%- set unix_sock_ro_perms = "0777" %}
+{%- set unix_sock_rw_perms = "0770" %}
{%- if compute.libvirt.tls.allowed_dn_list is defined %}
{% set tls_allowed_dn_list = [] %}
{%- for _,item in compute.libvirt.tls.allowed_dn_list.iteritems() %}
diff --git a/nova/files/queens/libvirtd.conf.Debian b/nova/files/queens/libvirtd.conf.Debian
index aab457c..fdbcf9e 100644
--- a/nova/files/queens/libvirtd.conf.Debian
+++ b/nova/files/queens/libvirtd.conf.Debian
@@ -26,8 +26,8 @@
{%- set key_file = compute.libvirt.tls.key_file %}
{%- set cert_file = compute.libvirt.tls.cert_file %}
{%- set ca_file = compute.libvirt.tls.ca_file %}
-{%- set unix_sock_ro_perms = "0000" %}
-{%- set unix_sock_rw_perms = "0000" %}
+{%- set unix_sock_ro_perms = "0777" %}
+{%- set unix_sock_rw_perms = "0770" %}
{%- if compute.libvirt.tls.allowed_dn_list is defined %}
{% set tls_allowed_dn_list = [] %}
{%- for _,item in compute.libvirt.tls.allowed_dn_list.iteritems() %}