archiver-appliance / epicsarchiverap

This is an implementation of an archiver for EPICS control systems that aims to archive millions of PVs.
Other
38 stars 38 forks source link

define access rights for storage #83

Closed dschick closed 5 years ago

dschick commented 5 years ago

Hej,

I am running the archiver as a service in my debian, so essentially it is run as root. This leads to the fact that all data is stored in the data locations by root as well with no access right to other users. -rw------- 1 root root 4235 Jun 4 11:26 RP:2019_06_04_09.pb I would like to change that to allow reading for everyone.

Is this possible?

slacmshankar commented 5 years ago

If you are checking to see if there is some hook in the archiver to change permissions, sorry no..

However, why do you run as root? All service startup scripts let you define the user you run the process as. Also, you can set the proper umask in your startup script to allow read's by all..

dschick commented 5 years ago

okay, that was simple. Thanks a lot for the quick response!

dschick commented 5 years ago

btw, the User and Group are working for me, the UMask somehow not. Maybe the UMask is somewhere overwritten?

slacmshankar commented 5 years ago

I don't think we do anything with the umask; however, Tomcat does have a setting in it's startup file. My version of Tomcat has this environment variable that can be used UMASK (Optional) Override Tomcat's default UMASK of 0027

slacmshankar commented 5 years ago

Did this work?

dschick commented 5 years ago

Sorry, I did not have time to try it yet.

Murali Shankar notifications@github.com schrieb am Do., 13. Juni 2019, 19:56:

Did this work?

— You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub https://github.com/slacmshankar/epicsarchiverap/issues/83?email_source=notifications&email_token=ADJIQLAOEZG3ZF2DTXHWC23P2KC6LA5CNFSM4HS2QCH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXUREWY#issuecomment-501813851, or mute the thread https://github.com/notifications/unsubscribe-auth/ADJIQLEB4VQ4OPOCAFXUKNTP2KC6LANCNFSM4HS2QCHQ .