From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS3215 2.6.0.0/16 X-Spam-Status: No, score=-3.8 required=3.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RCVD_IN_DNSWL_LOW,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.0 Received: from mail-it0-x22e.google.com (mail-it0-x22e.google.com [IPv6:2607:f8b0:4001:c0b::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 1F4AD1F42D for ; Thu, 24 May 2018 17:09:11 +0000 (UTC) Received: by mail-it0-x22e.google.com with SMTP id y189-v6so3322129itb.2 for ; Thu, 24 May 2018 10:09:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=google; h=to:from:subject:organization:message-id:date:user-agent :mime-version; bh=nfVmuq46Spfhg5xsm29QWG0dHeVj3TUPqQlRyIf8ays=; b=CGz+m6+DmUJRiBdBsM6e/OdgGDq3eqQvlKDfmLXGdRAUumks4zooKecp7lA/e2MXI0 RZ9o6/w51u1GmLGJqtSvq2BRVYiW+y9X4DuudQ+ZAo/rAM4bvQSiKDwOcMXB55ADtouC dutKOUS/yEkn21LDiagrJvwIh2r4tODi5zqoM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:organization:message-id:date :user-agent:mime-version; bh=nfVmuq46Spfhg5xsm29QWG0dHeVj3TUPqQlRyIf8ays=; b=PoXvVIyxz1Jf+J3fLGmDLp8OwXbgFJSGFUHbtAeWpQuZ3RHuspyGcXi/zvJeOakTCM n71Gh6Mtd5rxDtm5gFwy4PUv5qdlIkjdpfYgFDwDAqSjeeDScyPbh+Y7gd/OzLVzZiRV cS+xCZUdHBT4YW8E8Hvs0kInODQTL41QVdda7AMFkQdzL/rz894QwTkgBm7NjYo4H4Fl /bIr567NOAdQeKthjHxvSv+2V2dcZUYFgnKO+LhbTZL2GfMJFUliQ6NEH4Me2ea2teMP i+vwQxpTrM7uIk8T0erMlLFQQI3hNZA0jXU8b6TNWqnc2OHroUmo4EN0t98i0LdT3xpp Rl1g== X-Gm-Message-State: ALKqPwd5iyJly8U4fOCLKsNoxfQh6FpC59CGagyDm0Fni/0X50I0DvNn v3bzylMUdFoag+KD0qDhQ9TsyCFW0Hs= X-Google-Smtp-Source: AB8JxZroHBCHzSDlXdlwQTe53QucierQyCbuz9BGfjLkfS5FULjqWtzSJ363YbQ9UV2Nr6i2W8qv8w== X-Received: by 2002:a24:2494:: with SMTP id f142-v6mr10687344ita.0.1527181749907; Thu, 24 May 2018 10:09:09 -0700 (PDT) Received: from [10.137.0.22] (ca2x.mullvad.net. [162.219.176.251]) by smtp.gmail.com with ESMTPSA id w12-v6sm14947783iow.76.2018.05.24.10.09.08 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 May 2018 10:09:09 -0700 (PDT) To: meta@public-inbox.org From: Konstantin Ryabitsev Subject: Umask and xapian db file permissions Organization: The Linux Foundation Message-ID: <38873789-ab42-65a1-20c9-12c30b171f4f@linuxfoundation.org> Date: Thu, 24 May 2018 13:09:06 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="bcaaihs9kbxY3lqgoIygtun0UdbCVCLtK" List-Id: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --bcaaihs9kbxY3lqgoIygtun0UdbCVCLtK Content-Type: multipart/mixed; boundary="VlEdUJAAp6I3ZOjhpWqOhEqBsY4OJ7MO7"; protected-headers="v1" From: Konstantin Ryabitsev To: meta@public-inbox.org Message-ID: <38873789-ab42-65a1-20c9-12c30b171f4f@linuxfoundation.org> Subject: Umask and xapian db file permissions --VlEdUJAAp6I3ZOjhpWqOhEqBsY4OJ7MO7 Content-Type: text/plain; charset=utf-8 Content-Language: en-CA Content-Transfer-Encoding: quoted-printable Hello: For some reason, when public-inbox-mda reindexes the repository past-delivery, it creates some files as 0660, even though umask is specifically set to 0002: $ ls -al public-inbox/xapian15/ total 21932 drwxrwxr-x. 2 archiver archiver 4096 May 24 16:52 . drwxrwxr-x. 3 archiver archiver 42 May 24 16:52 .. -rw-rw-r--. 1 archiver archiver 0 May 24 16:52 flintlock -rw-rw-r--. 1 archiver archiver 28 May 24 15:56 iamchert -rw-rw-r--. 1 archiver archiver 1190912 May 24 16:52 over.sqlite3 -rw-rw-r--. 1 archiver archiver 0 May 24 16:52 over.sqlite3-journal= -rw-rw----. 1 archiver archiver 150 May 24 16:48 position.baseA -rw-rw----. 1 archiver archiver 150 May 24 16:52 position.baseB -rw-rw-r--. 1 archiver archiver 8626176 May 24 16:52 position.DB -rw-rw----. 1 archiver archiver 149 May 24 16:48 postlist.baseA -rw-rw----. 1 archiver archiver 149 May 24 16:52 postlist.baseB -rw-rw-r--. 1 archiver archiver 8642560 May 24 16:52 postlist.DB -rw-rw----. 1 archiver archiver 20 May 24 16:48 record.baseA -rw-rw----. 1 archiver archiver 20 May 24 16:52 record.baseB -rw-rw-r--. 1 archiver archiver 368640 May 24 16:52 record.DB -rw-rw----. 1 archiver archiver 71 May 24 16:48 termlist.baseA -rw-rw----. 1 archiver archiver 71 May 24 16:52 termlist.baseB -rw-rw-r--. 1 archiver archiver 3579904 May 24 16:52 termlist.DB Since the daemon is running as user "publicinbox", this causes the web interface to break due to not being able to access the index. Best, --=20 Konstantin Ryabitsev Director, IT Infrastructure Security The Linux Foundation --VlEdUJAAp6I3ZOjhpWqOhEqBsY4OJ7MO7-- --bcaaihs9kbxY3lqgoIygtun0UdbCVCLtK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQR2vl2yUnHhSB5njDW2xBzjVmSZbAUCWwbxsgAKCRC2xBzjVmSZ bCZ3AQCNP1mTRrrHlYdV/NXIMN64BrLsfdiIou+B9gNPDPuifwD+IWeTRbK/Hw3Q E2t2Xer+IliJT9C1tedI2U9+I2e+vgI= =SiYd -----END PGP SIGNATURE----- --bcaaihs9kbxY3lqgoIygtun0UdbCVCLtK--