{"action":"created","issue":{"url":"https://api.github.com/repos/spinnaker/spinnaker/issues/2904","repository_url":"https://api.github.com/repos/spinnaker/spinnaker","labels_url":"https://api.github.com/repos/spinnaker/spinnaker/issues/2904/labels{/name}","comments_url":"https://api.github.com/repos/spinnaker/spinnaker/issues/2904/comments","events_url":"https://api.github.com/repos/spinnaker/spinnaker/issues/2904/events","html_url":"https://github.com/spinnaker/spinnaker/issues/2904","id":332169260,"node_id":"MDU6SXNzdWUzMzIxNjkyNjA=","number":2904,"title":"Halyard installation ends with \"bash: /usr/local/bin/hal: Permission denied\"","user":{"login":"usrleon","id":738377,"node_id":"MDQ6VXNlcjczODM3Nw==","avatar_url":"https://avatars3.githubusercontent.com/u/738377?v=4","gravatar_id":"","url":"https://api.github.com/users/usrleon","html_url":"https://github.com/usrleon","followers_url":"https://api.github.com/users/usrleon/followers","following_url":"https://api.github.com/users/usrleon/following{/other_user}","gists_url":"https://api.github.com/users/usrleon/gists{/gist_id}","starred_url":"https://api.github.com/users/usrleon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/usrleon/subscriptions","organizations_url":"https://api.github.com/users/usrleon/orgs","repos_url":"https://api.github.com/users/usrleon/repos","events_url":"https://api.github.com/users/usrleon/events{/privacy}","received_events_url":"https://api.github.com/users/usrleon/received_events","type":"User","site_admin":false},"labels":[{"id":111166987,"node_id":"MDU6TGFiZWwxMTExNjY5ODc=","url":"https://api.github.com/repos/spinnaker/spinnaker/labels/bug","name":"bug","color":"fc4400","default":true},{"id":675893188,"node_id":"MDU6TGFiZWw2NzU4OTMxODg=","url":"https://api.github.com/repos/spinnaker/spinnaker/labels/component/halyard","name":"component/halyard","color":"c7def8","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-06-13T21:23:06Z","updated_at":"2018-06-14T22:06:09Z","closed_at":null,"author_association":"NONE","body":"## Issue Summary:\r\nFollow this guide: https://www.spinnaker.io/setup/install/halyard/#install-on-ubuntu-14041604\r\nAfter you run \"sudo bash InstallHalyard.sh\"\r\nat the last stage you get an error \"bash: /usr/local/bin/hal: Permission denied\"\r\nThats because access rights on this file lack of x for others and it doesn't belong to any real users:\r\n-rwxr-xr-- 1 2038 2038 1380 May  9 15:35 /usr/local/bin/hal"},"comment":{"url":"https://api.github.com/repos/spinnaker/spinnaker/issues/comments/397452927","html_url":"https://github.com/spinnaker/spinnaker/issues/2904#issuecomment-397452927","issue_url":"https://api.github.com/repos/spinnaker/spinnaker/issues/2904","id":397452927,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NzQ1MjkyNw==","user":{"login":"ezimanyi","id":1391982,"node_id":"MDQ6VXNlcjEzOTE5ODI=","avatar_url":"https://avatars3.githubusercontent.com/u/1391982?v=4","gravatar_id":"","url":"https://api.github.com/users/ezimanyi","html_url":"https://github.com/ezimanyi","followers_url":"https://api.github.com/users/ezimanyi/followers","following_url":"https://api.github.com/users/ezimanyi/following{/other_user}","gists_url":"https://api.github.com/users/ezimanyi/gists{/gist_id}","starred_url":"https://api.github.com/users/ezimanyi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ezimanyi/subscriptions","organizations_url":"https://api.github.com/users/ezimanyi/orgs","repos_url":"https://api.github.com/users/ezimanyi/repos","events_url":"https://api.github.com/users/ezimanyi/events{/privacy}","received_events_url":"https://api.github.com/users/ezimanyi/received_events","type":"User","site_admin":false},"created_at":"2018-06-14T22:06:08Z","updated_at":"2018-06-14T22:06:08Z","author_association":"MEMBER","body":"That seems reasonable---there are a few other places where we need to be more explicit about permissions to ensure that halyard works with a restrictive umask.  I've made those changes on https://github.com/spinnaker/halyard/pull/973/ and tested that it works with umask `027` without needing to take any manual steps.\r\n\r\n`/usr/local/bin/hal` will be owned by root but will have `o+x` permissions so that other users can execute it.  (In general we're following the paradigm where root owns the binaries for haylard, and the account running halyard only has read+execute on these.)"}}
{"actor":{"display_login":"ezimanyi"}}