Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deprecate "init" config file template for RHEL7 and newer? #545

Open
DonEstefan opened this issue Jun 29, 2022 · 1 comment
Open

deprecate "init" config file template for RHEL7 and newer? #545

DonEstefan opened this issue Jun 29, 2022 · 1 comment
Labels

Comments

@DonEstefan
Copy link
Contributor

Describe the bug
If I understand correctly, the template file etc/sysconfig/rhel_sysconfig_init.j2 won't work on RHEL7 and newer, since it uses "systemd" instead of "init".
I assume the "Daemon umask" (NSA 2.2.4.1) set in the template file won't have any effect and needs to be replaced by something else.
I also suspect RHEL6 was the last release where setting os_security_init_single: true actually worked. This variable is referenced in the template. RHEL7 enforces a single user mode password by default, so os_security_init_single might not be needed any longer.

Role Version

7.14.2
@rndmh3ro
Copy link
Member

If I understand correctly, the template file etc/sysconfig/rhel_sysconfig_init.j2 won't work on RHEL7 and newer, since it uses "systemd" instead of "init".

You're right, I tested it. This only works for applications that are getting started with init-scripts, not with systemd.
We should probably use pam and /etc/profile for this.

@rndmh3ro rndmh3ro added the bug label Aug 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants