On Friday 2017-01-06 13:16, Per Jessen wrote:

Paul Neuwirth wrote:

...

Hello group, after websearching around, I did not find anything, about this: How are permissions, set in /etc/permissions.* and /etc/permissions.d/* processed?

For starters, see "man permissions'.

...

I added a file according to a manual in /etc/permissions.d/, but these permissions do not get applied (after file creation by a daemon). Old documentation/threads mention SuSEconfig, but this tool is not used anymore... How do I apply these settings/ which service needs to be reloaded/restarted? files seem to be handled by chkstat according to rpm -qf ..

chkstat is invoked by rpms or by YaST.

so it cannot be used for that purpose. Is there any other tool? or do I need to set up it in the service definition of nagios in systemd (which gets overwritten by every update...) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Friday 2017-01-06 13:45, Andrei Borzenkov wrote:

Date: Fri, 6 Jan 2017 13:45:46 From: Andrei Borzenkov To: opensuse@opensuse.org Subject: Re: [opensuse] /etc/permissions.d on openSuSE 13.2 / nagvis/mk-livestatus

06.01.2017 15:22, Paul Neuwirth пишет:

...

On Friday 2017-01-06 13:16, Per Jessen wrote:

...

Paul Neuwirth wrote:

...

Hello group, after websearching around, I did not find anything, about this: How are permissions, set in /etc/permissions.* and /etc/permissions.d/* processed?

For starters, see "man permissions'.

...

I added a file according to a manual in /etc/permissions.d/, but these permissions do not get applied (after file creation by a daemon). Old documentation/threads mention SuSEconfig, but this tool is not used anymore... How do I apply these settings/ which service needs to be reloaded/restarted? files seem to be handled by chkstat according to rpm -qf ..

chkstat is invoked by rpms or by YaST.

so it cannot be used for that purpose.

Which purpose? You started with question about solution without telling which problem you are trying to solve.

missing in the last quote. I want to link nagvis (on apache) to mk-livestatus (module on nagios), but the socket created has wrong owner, so inaccessible for wwwrun. easiest solution would be to add the group to wwwrun. but the default setup mentions the solution with /etc/permissions.d/ but the unix socket is deleted/created wit stop/start of nagios. So this won't work.

On Friday 2017-01-06 14:36, Per Jessen wrote:

Paul Neuwirth wrote:

...

I want to link nagvis (on apache) to mk-livestatus (module on nagios), but the socket created has wrong owner, so inaccessible for wwwrun. easiest solution would be to add the group to wwwrun. but the default setup mentions the solution with /etc/permissions.d/ but the unix socket is deleted/created wit stop/start of nagios. So this won't work.

Amend the start/stop script for nagios to also change the socket owner?

I also thought about this. I recently did such changes, but it is quite problematic, because these scripts get overwritten on rpm update. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Paul Neuwirth wrote:

On Friday 2017-01-06 14:36, Per Jessen wrote:

...

Paul Neuwirth wrote:

...

I want to link nagvis (on apache) to mk-livestatus (module on nagios), but the socket created has wrong owner, so inaccessible for wwwrun. easiest solution would be to add the group to wwwrun. but the default setup mentions the solution with /etc/permissions.d/ but the unix socket is deleted/created wit stop/start of nagios. So this won't work.

Amend the start/stop script for nagios to also change the socket owner?

I also thought about this. I recently did such changes, but it is quite problematic, because these scripts get overwritten on rpm update.

You could override this with a systemd service unit drop-in, that's easily done. -- Per Jessen, Zürich (-5.0°C) http://www.cloudsuisse.com/ - your owncloud, hosted in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Friday 2017-01-06 15:54, Per Jessen wrote:

Paul Neuwirth wrote:

...

On Friday 2017-01-06 13:16, Per Jessen wrote:

...

Paul Neuwirth wrote:

...

Hello group, after websearching around, I did not find anything, about this: How are permissions, set in /etc/permissions.* and /etc/permissions.d/* processed?

For starters, see "man permissions'.

...

I added a file according to a manual in /etc/permissions.d/, but these permissions do not get applied (after file creation by a daemon). Old documentation/threads mention SuSEconfig, but this tool is not used anymore... How do I apply these settings/ which service needs to be reloaded/restarted? files seem to be handled by chkstat according to rpm -qf ..

chkstat is invoked by rpms or by YaST.

so it cannot be used for that purpose. Is there any other tool? or do I need to set up it in the service definition of nagios in systemd (which gets overwritten by every update...)

See my previous post - assuming nagios is "nagios.service", you can create /etc/systemd/system/nagios.service.d/something.conf and add your overrides or extensions there. That works really well.

Thank you, this really helps -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 06/01/17 17:36, Per Jessen wrote:

Paul Neuwirth wrote:

...

On Friday 2017-01-06 15:54, Per Jessen wrote:

...

Paul Neuwirth wrote:

...

On Friday 2017-01-06 13:16, Per Jessen wrote:

...

Paul Neuwirth wrote:

...

Hello group, after websearching around, I did not find anything, about this: How are permissions, set in /etc/permissions.* and /etc/permissions.d/* processed?

For starters, see "man permissions'.

...

I added a file according to a manual in /etc/permissions.d/, but these permissions do not get applied (after file creation by a daemon). Old documentation/threads mention SuSEconfig, but this tool is not used anymore... How do I apply these settings/ which service needs to be reloaded/restarted? files seem to be handled by chkstat according to rpm -qf ..

chkstat is invoked by rpms or by YaST.

so it cannot be used for that purpose. Is there any other tool? or do I need to set up it in the service definition of nagios in systemd (which gets overwritten by every update...)

See my previous post - assuming nagios is "nagios.service", you can create /etc/systemd/system/nagios.service.d/something.conf and add your overrides or extensions there. That works really well.

Thank you, this really helps

That's great - depending on what you need, using those drop-ins can be a little tricky, but you'll find many examples out there.

Just to add, this is a deliberate design feature of systemd - the designers assumed that the upstream defaults in the service file or whatever would not suit everyone, so they provided a way for end users to create their own local file, with only their local changes, that then modifies the defaults provided by the distro. And just like distros are not allowed to update /usr/local, they're not allowed to update this, either. Cheers, Wol -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org