X-Git-Url: https://review.fuel-infra.org/gitweb?a=blobdiff_plain;f=trusty%2Fdebian%2Fneutron-common.postinst;fp=trusty%2Fdebian%2Fneutron-common.postinst;h=6de03ad3b918b5efc0dd190c998ea624426447b1;hb=3650bade146bf59a7828feda89ddb602dfea6047;hp=0000000000000000000000000000000000000000;hpb=0bcbc79c7893e3a69ff8bb600e44ec71fa8ae713;p=openstack-build%2Fneutron-build.git

diff --git a/trusty/debian/neutron-common.postinst b/trusty/debian/neutron-common.postinst
new file mode 100644
index 000000000..6de03ad3b
--- /dev/null
+++ b/trusty/debian/neutron-common.postinst
@@ -0,0 +1,38 @@
+#!/bin/sh
+
+set -e 
+
+if [ "$1" = "configure" ]
+then
+	if ! getent group neutron > /dev/null 2>&1
+	then
+		addgroup --system neutron >/dev/null
+	fi
+	if ! getent passwd neutron > /dev/null 2>&1
+	then
+		adduser --system --home /var/lib/neutron --ingroup neutron --no-create-home --shell /bin/false neutron
+	fi
+	chown -R neutron:neutron /var/lib/neutron/
+
+	chown -R neutron:adm /var/log/neutron/ 
+	chmod 0750 /var/log/neutron/
+
+    chown -R root:neutron /etc/neutron/
+    # NOTE(jamespage): In order to execute unit test in decomposed
+    #                  vendor drivers, /etc/neutron must be readable
+    #                  other than by root or neutron; limitation of
+    #                  access to neutron.conf is sufficient as this
+    #                  file contains access details for DB, keystone
+    #                  and message bus.
+    chmod 0755 /etc/neutron/
+    chmod -f 0640 /etc/neutron/neutron.conf || :
+	chown root:root /etc/neutron/rootwrap.conf
+	chown -R root:root /etc/neutron/rootwrap.d
+	chmod 0755 /etc/neutron/rootwrap.d
+
+	if [ -f /etc/sudoers.d/neutron_sudoers ] ; then
+		chmod 0440 /etc/sudoers.d/neutron_sudoers
+	fi
+fi
+
+#DEBHELPER#