[jira] [Commented] (SOLR-10644) solr.in.sh installed by install script should be writable by solr user

["Jan Høydahl (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-10644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16002324#comment-16002324 ] 

Jan Høydahl commented on SOLR-10644:
------------------------------------

I'm opting for owned by solr instead:
{noformat}
-rw-rw---- 1 solr root 5968 Feb 15 14:55 /etc/default/solr.in.sh
{noformat}

> solr.in.sh installed by install script should be writable by solr user
> ----------------------------------------------------------------------
>
>                 Key: SOLR-10644
>                 URL: https://issues.apache.org/jira/browse/SOLR-10644
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: scripts and tools
>            Reporter: Jan Høydahl
>
> Spinoff from SOLR-8440
> {{install_solr_service.sh}} installs {{solr.in.sh}} as world-readable but not solr user writable:
> {noformat}
> -rw-r--r-- 1 root root 5968 Feb 15 14:55 /etc/default/solr.in.sh
> {noformat}
> For better security, and ease for scripts to update solr.in.sh, this should change to:
> {noformat}
> -rw-rw---- 1 root solr 5968 Feb 15 14:55 /etc/default/solr.in.sh
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org