openziti / ziti-tunnel-sdk-c

Apache License 2.0
43 stars 16 forks source link

grant read on ziti identities to members of group 'ziti' #787

Closed qrkourier closed 8 months ago

qrkourier commented 8 months ago

I proposed this change because a typical Linux user who has taken the manual step of adding themselves to the ziti permission group so they can send IPC commands like ziti-edge-tunnel add or submit_mfa is still unable to read the identity files that were added.

I found myself frequently adjusting the permissions on those files with root permission, i.e., sudo chmod -Rc g+rX /opt/openziti/etc/identities, and estimated that other users too are likely to expect read access after manually adding themselves to the permission group.