Create a secure option for asset roots

tst-cjeffries commented 4 years ago

Adds a --secure flag to geconfigureassetroot and geupgradeassetroot to remove world-writable permissions.

To test:

Build and install.
Verify that the fusion executable is owned by root:gegroup and has the following permissions: -r-xr-sr-x.
Verify that both /gevol/assets/.config and /gevol/assets/.userdata both are world writable.
Open fusion and attempt to add a provider or sever association.
Verify that the operation succeeds.
Repair the asset root with the secure flag: geconfigureassetroot --repair --secure
Verify that both /gevol/assets/.config and /gevol/assets/.userdata both are not world writable.
Open fusion and attempt to add a provider or server association.
Verify that the operation succeeds.
Run the tutorial data scripts (for good measure).

tst-jzmolek commented 4 years ago

The code that creates the Fusion RPM should also be updated to set the ownership and permissions like the install.

tst-cjeffries commented 4 years ago

Good catch.

tst-cjeffries commented 4 years ago

RPM changes have been added/tested @tst-jzmolek

google / earthenterprise