{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/elasticsearch/issues/11016","labels_url":"https://api.github.com/repos/elastic/elasticsearch/issues/11016/labels{/name}","comments_url":"https://api.github.com/repos/elastic/elasticsearch/issues/11016/comments","events_url":"https://api.github.com/repos/elastic/elasticsearch/issues/11016/events","html_url":"https://github.com/elastic/elasticsearch/issues/11016","id":73629601,"number":11016,"title":"RPM/DEB packages: change permissions/ownership of config and bin plugins dirs","user":{"login":"tlrx","id":642733,"avatar_url":"https://avatars.githubusercontent.com/u/642733?v=3","gravatar_id":"","url":"https://api.github.com/users/tlrx","html_url":"https://github.com/tlrx","followers_url":"https://api.github.com/users/tlrx/followers","following_url":"https://api.github.com/users/tlrx/following{/other_user}","gists_url":"https://api.github.com/users/tlrx/gists{/gist_id}","starred_url":"https://api.github.com/users/tlrx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tlrx/subscriptions","organizations_url":"https://api.github.com/users/tlrx/orgs","repos_url":"https://api.github.com/users/tlrx/repos","events_url":"https://api.github.com/users/tlrx/events{/privacy}","received_events_url":"https://api.github.com/users/tlrx/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/elasticsearch/labels/:Packaging","name":":Packaging","color":"009800"},{"url":"https://api.github.com/repos/elastic/elasticsearch/labels/v2.0.0","name":"v2.0.0","color":"dddddd"}],"state":"open","locked":false,"assignee":{"login":"tlrx","id":642733,"avatar_url":"https://avatars.githubusercontent.com/u/642733?v=3","gravatar_id":"","url":"https://api.github.com/users/tlrx","html_url":"https://github.com/tlrx","followers_url":"https://api.github.com/users/tlrx/followers","following_url":"https://api.github.com/users/tlrx/following{/other_user}","gists_url":"https://api.github.com/users/tlrx/gists{/gist_id}","starred_url":"https://api.github.com/users/tlrx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tlrx/subscriptions","organizations_url":"https://api.github.com/users/tlrx/orgs","repos_url":"https://api.github.com/users/tlrx/repos","events_url":"https://api.github.com/users/tlrx/events{/privacy}","received_events_url":"https://api.github.com/users/tlrx/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-05-06T13:57:07Z","updated_at":"2015-05-06T16:10:23Z","closed_at":null,"body":"When installing elasticsearch with a RPM or DEB package, the configuration directory `/etc/elasticsearch` should be owned by user `root` and group `elasticsearch` with `750` permissions (`root` has full access, read/list access for users of `elasticsearch` group and nothing for others users)\r\n\r\nWhen installing a plugin that contains configuration files like `/etc/elasticsearch/awesome-plugin/`, the plugin directory should be owned by user `root` and group `elasticsearch` with `750` permissions.\r\n\r\nWhen installing a plugin that contains bin/ files like `/usr/share/elasticsearch/bin/awesome-plugin/`, the plugin directory and all its files should be owned by user `root` and group `elasticsearch` with `750` permissions (`root` has read/write/execute access, read/execute access for users of `elasticsearch` group and nothing for others users).\r\n\r\nWe also need to test how RPM/DEB packages handle permissions/ownership changes when upgrading a package.\r\n"},"comment":{"url":"https://api.github.com/repos/elastic/elasticsearch/issues/comments/99525419","html_url":"https://github.com/elastic/elasticsearch/issues/11016#issuecomment-99525419","issue_url":"https://api.github.com/repos/elastic/elasticsearch/issues/11016","id":99525419,"user":{"login":"rmuir","id":504194,"avatar_url":"https://avatars.githubusercontent.com/u/504194?v=3","gravatar_id":"","url":"https://api.github.com/users/rmuir","html_url":"https://github.com/rmuir","followers_url":"https://api.github.com/users/rmuir/followers","following_url":"https://api.github.com/users/rmuir/following{/other_user}","gists_url":"https://api.github.com/users/rmuir/gists{/gist_id}","starred_url":"https://api.github.com/users/rmuir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rmuir/subscriptions","organizations_url":"https://api.github.com/users/rmuir/orgs","repos_url":"https://api.github.com/users/rmuir/repos","events_url":"https://api.github.com/users/rmuir/events{/privacy}","received_events_url":"https://api.github.com/users/rmuir/received_events","type":"User","site_admin":false},"created_at":"2015-05-06T16:10:23Z","updated_at":"2015-05-06T16:10:23Z","body":"> It just seems weird that someone trying to configure e.g. elasticsearch.yml would need to run as root/sudo?\r\n\r\nI don't think its wierd to require root/sudo to change configuration files in /etc at all."}}