The command:
sudo ceph-mon --cluster ceph --mkfs -i $NODE_NAME --keyring $PATH_MON_KEYRING
Writes a new keyring with permissions set to "0644".
Fixes: #14950
Signed-off-by: Owen Synge osynge@suse.com
os << g_conf->mon_data << "/keyring";
int err = 0;
- int fd = ::open(os.str().c_str(), O_WRONLY|O_CREAT, 0644);
+ int fd = ::open(os.str().c_str(), O_WRONLY|O_CREAT, 0600);
if (fd < 0) {
err = -errno;
dout(0) << __func__ << " failed to open " << os.str()