717817 - File mask on crashanalysis.dmz.phx1 seems to have changed

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Robert Kaiser]

I loaded a new script to crashanalysis.dmz.phx1 within the last hour and ran it, seeing that files it created couldn't be accessed from the web. Those files all have -rw-r----- permissions.
All the files that have been created by such scripts so far did get -rw-r--r-- permissions by default, even those that have been created today in the morning, so there seems to have been a change in the file mask today that caused this.

With the files all going to be non-world-readable by default, I expect that all new reports generated by our scripts on this machine will be inaccessible from the web tomorrow, causing big grief among anyone who wants to use them.

I tested removing a file that has been created world-readable in the morning and re-running the existing script to regenerate it, and it ended up non-world-readable as well, so this smells a lot like this has been changed today by something.

If the mask change is being done for security reasons, we need at least some time to adjust our scripts and we should discuss that step - if it has been done inadvertently, please revert it.

Comment 1

[Robert Kaiser]

FYI, the results of this are pretty visible in /mnt/crashanalysis/rkaiser/2012-01-11/ (there's one file, which is the one with the script re-run thing, I did manually chmod back to what it should be, I left the others with the wrong permissions for now to show the bug - the file modification times for all except that one file could help narrow down the time span in which the change happened, if needed).

Comment 2

[Justin Dow [:jabba]]

There was a new global umask pushed globally today, which was a requirement from infrasec. I've prepended both your and chofmann's cron tasks with "umask 22; " which should solve this problem for this use case.