search

lvicainne / puppet-opendkim

Puppet module for opendkim
https://forge.puppetlabs.com/lvicainne/opendkim
Other
5 stars 33 forks source link

Permissions for pid directory don't match the permissions set by the service in Centos Stream 8 #34

Closed sazzle2611 closed 10 months ago

sazzle2611 commented 1 year ago

Permissions for pid directory and home directory are hardcoded to 0755 but the service changes them to 0750 on start so every puppet run resets them to 0755 and restarts the service, which then sets them back to 0750

Opendkim v2.11.0

This is the contents of /etc/systemd/system/multi-user.target.wants/opendkim.service

[Unit]
Description=DomainKeys Identified Mail (DKIM) Milter
Documentation=man:opendkim(8) man:opendkim.conf(5) man:opendkim-genkey(8) man:opendkim-genzone(8) man:opendkim-testadsp(8) man:opendkim-testkey http://www.opendkim.org/docs.html
After=network.target nss-lookup.target syslog.target

[Service]
Type=simple
EnvironmentFile=-/etc/sysconfig/opendkim
ExecStart=/usr/sbin/opendkim -f $OPTIONS
ExecReload=/bin/kill -USR1 $MAINPID
User=opendkim
Group=opendkim
Restart=on-failure
RuntimeDirectory=opendkim
RuntimeDirectoryMode=0750

[Install]
WantedBy=multi-user.target