[PKG-Openstack-devel] Bug#801917: rabbitmq-server: permissions of /etc/rabbitmq/rabbitmq-env.conf makes it impossible to run rabbitmq as other users

[Antonio Terceiro]

Package: rabbitmq-server
Version: 3.5.4-3
Severity: normal

Hi,

The new version of debci runs an instance of rabbitmq-server on its test
suite in order to test the master/worker setup (which uses
rabbitmq-server as a transport).

A recent (post-jessie) version of rabbitmq-server now reads
/etc/rabbitmq/rabbitmq-env.conf unconditionally, what fails when not run
by the rabbitmq user itself because that file is not readable by others:

$ ls -l /etc/rabbitmq/rabbitmq-env.conf
-rw-r----- 1 rabbitmq rabbitmq 535 Out 16 00:16 /etc/rabbitmq/rabbitmq-env.conf

The default contents of the file is fully commented, so is there a good
reason for it to be 0640 instead of 0644? Please consider changing it
back to 0644, or at least providing a mechanism (probably via an
environment variable, as several other settings) to override the
location of this environment file.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages rabbitmq-server depends on:
ii  adduser              3.113+nmu3
ii  erlang-nox           1:18.0-dfsg-2
ii  init-system-helpers  1.24
ii  logrotate            3.8.7-2

rabbitmq-server recommends no packages.

rabbitmq-server suggests no packages.

-- no debconf information

-- 
Antonio Terceiro <terceiro at debian.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/openstack-devel/attachments/20151016/949a64e7/attachment.sig>