[Bug 1382632] Re: Insecure key file permissions

[Andreas Hasenack]

The secret_key file is created when python manage.py collectstatic is
run, it seems.

We have two packages that run this command in postinst: openstack-
dashboard-ubuntu-theme and openstack-dashboard. In this scenario,
-ubuntu-theme is installed first. It runs that command in postinst, the
file is created, and apparently with the incorrect permissions: 0644

Then openstack-dashboard runs it again, and this time the secret_key
file already exists, and it complains about the incorrect permissions.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to horizon in Ubuntu.
https://bugs.launchpad.net/bugs/1382632

Title:
  Insecure key file permissions

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1382632/+subscriptions