From 3dcd1e4db7540459d3dff337684547d68fea2b44 Mon Sep 17 00:00:00 2001 From: Cédric Ollivier Date: Sun, 2 Jul 2017 10:16:05 +0200 Subject: Apply restrictive file permissions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit It conforms with [1] by creating a new venv which checks the unix permissions. As jjobs call Functest console scripts [2], all perms can be 644. Dockerfiles are updated as well. [1] https://security.openstack.org/guidelines/dg_apply-restrictive-file-permissions.html [2] https://gerrit.opnfv.org/gerrit/#/c/36805/ Depends-On: I9209e6efa1b493e24135402a46df72aaa14115d1 Change-Id: I31bc7f12b775928845e23b6b40288b0a50b87219 Signed-off-by: Cédric Ollivier --- functest/ci/download_images.sh | 0 functest/ci/prepare_env.py | 4 ---- functest/ci/run_tests.py | 3 --- functest/opnfv_tests/openstack/vping/ping.sh | 0 functest/opnfv_tests/vnf/ims/create_venv.sh | 0 5 files changed, 7 deletions(-) mode change 100755 => 100644 functest/ci/download_images.sh mode change 100755 => 100644 functest/ci/prepare_env.py mode change 100755 => 100644 functest/ci/run_tests.py mode change 100755 => 100644 functest/opnfv_tests/openstack/vping/ping.sh mode change 100755 => 100644 functest/opnfv_tests/vnf/ims/create_venv.sh (limited to 'functest') diff --git a/functest/ci/download_images.sh b/functest/ci/download_images.sh old mode 100755 new mode 100644 diff --git a/functest/ci/prepare_env.py b/functest/ci/prepare_env.py old mode 100755 new mode 100644 index ae9d9537..da3e6245 --- a/functest/ci/prepare_env.py +++ b/functest/ci/prepare_env.py @@ -389,7 +389,3 @@ def main(): parser = PrepareEnvParser() args = parser.parse_args(sys.argv[1:]) return prepare_env(**args) - - -if __name__ == '__main__': - sys.exit(main()) diff --git a/functest/ci/run_tests.py b/functest/ci/run_tests.py old mode 100755 new mode 100644 index 5155adc4..b95e1008 --- a/functest/ci/run_tests.py +++ b/functest/ci/run_tests.py @@ -276,6 +276,3 @@ def main(): args = parser.parse_args(sys.argv[1:]) runner = Runner() return runner.main(**args).value - -if __name__ == '__main__': - sys.exit(main()) diff --git a/functest/opnfv_tests/openstack/vping/ping.sh b/functest/opnfv_tests/openstack/vping/ping.sh old mode 100755 new mode 100644 diff --git a/functest/opnfv_tests/vnf/ims/create_venv.sh b/functest/opnfv_tests/vnf/ims/create_venv.sh old mode 100755 new mode 100644 -- cgit 1.2.3-korg