** Changed in: neutron
Status: Fix Committed => Fix Released
** Changed in: neutron
Milestone: None => liberty-rc1
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1493492
Title:
VPNaaS: ipsec.secrets file permissions prevents LibreSwan from
starting
Status in neutron:
Fix Released
Bug description:
The man pages for ipsec.secrets generally state that the file should
be owned by root or super-user and access blocked to everyone else
(chmod 0600). Recent changes have dealt with the file permissions
issue. However, in neutron vpnaas the file ownership is that of the
process and due to strict permission checks through "capabilities",
this actually results in a failure to establish connections with
LibreSwan since pluto runs as root. This seems to be LibreSwan
specific.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1493492/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
