certbot/letsencrypt-auto-source
Brad Warren d1330efe41
Print warning when certbot-auto has insecure permissions. (#6995)
This PR attempts to better inform people about the problem identified at https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979/.

I was hesitant to add the flag --no-permissions-check, however, if there's some obscure distro out there (or custom user setup) that has a strange users and groups, I didn't want us to either:

Have to put out a bug fix release
Refuse to fix the problem and let them deal with warnings on every run

* add check_permissions.py

* Update letsencrypt-auto.template.

* build letsencrypt-auto

* Add test_permissions_warnings to auto_test

* Allow uid/gid < 1000.

* Add --no-permissions-check to Certbot.

* Add --no-permissions-check to certbot-auto.

* Add test farm test that letsencrypt-auto is quiet.

As a bonus, this new test will catch problems like the one that the caused
0.33.1 point release.

* Update CHANGELOG about permissions check.

* Update permissions comment.

* Fix symlink handling.

* Use a better default in auto_test.py.
2019-04-30 10:45:03 -07:00
..
pieces Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
tests Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
build.py Pin dependency versions when using tools/venv.sh (#4629) 2017-05-11 10:06:05 -07:00
certbot-auto.asc Release 0.33.1 2019-04-04 15:24:43 -07:00
Dockerfile.centos6 Update setuptools pinned in pipstrap (#6699) (#6704) 2019-01-25 11:53:29 -08:00
Dockerfile.jessie Revert "Configure jessie repos in LTS mode during Docker build (#6887)" (#6889) 2019-03-27 07:27:06 +01:00
Dockerfile.trusty Explicitly add six as a dependency in letsencrypt-auto-source dockerfiles (#5808) 2018-03-29 15:34:38 -07:00
Dockerfile.xenial Update outdated tests (#6515) 2019-01-16 13:17:37 -08:00
letsencrypt-auto Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
letsencrypt-auto.sig Release 0.33.1 2019-04-04 15:24:43 -07:00
letsencrypt-auto.template Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
rebuild_dependencies.py Fix typo and add instructions for changing a single dependency (#6978) 2019-04-30 06:59:45 +02:00
version.py Cleanup test farm tests and add test_sdists (#4089) 2017-01-30 19:37:23 -08:00