patches/0009-fix-4759-run-ceph-crash-daemon-with-www-data-group-f.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Thomas Lamprecht <t.lamprecht@proxmox.com>
   3 Date: Tue, 6 Jun 2023 13:36:13 +0200
   4 Subject: [PATCH] fix #4759: run ceph-crash daemon with www-data group for
   5  access to conf
   6
   7 Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
   8 ---
   9  src/ceph-crash.in | 2 +-
  10  1 file changed, 1 insertion(+), 1 deletion(-)
  11
  12 diff --git a/src/ceph-crash.in b/src/ceph-crash.in
  13 index 0e02837fa..010d6ea2e 100755
  14 --- a/src/ceph-crash.in
  15 +++ b/src/ceph-crash.in
  16 @@ -97,7 +97,7 @@ def drop_privs():
  17      if os.getuid() == 0:
  18          try:
  19              ceph_uid = pwd.getpwnam("ceph").pw_uid
  20 -            ceph_gid = grp.getgrnam("ceph").gr_gid
  21 +            ceph_gid = grp.getgrnam("www-data").gr_gid # ensure access to config in pmxcfs
  22              os.setgroups([])
  23              os.setgid(ceph_gid)
  24              os.setuid(ceph_uid)