protect.p4t #1

  • //
  • guest/
  • russell_jackson/
  • sdp/
  • Server/
  • Unix/
  • setup/
  • protect.p4t
  • View
  • Commits
  • Open Download .zip Download (93 B)
Protections:
	write user * * //...
	list user * * -//spec/...
	super user __P4USER__ * //...
# Change User Description Committed
#1 32852 Russell C. Jackson (Rusty) SDP: add missing protect.p4t template and copy configurables.cfg in mkdirs

configure_new_server.sh fails on a brand-new server in two ways that are
independent of any Ansible wrapper:

1. It initializes the Protections table from setup/protect.p4t, but that
   template was missing from the tree, so it silently skipped protections
   init (empty table). ccheck.sh then bailed with 'Could not verify super
   access'. Add protect.p4t (uses the __P4USER__ placeholder the script
   substitutes via sed).

2. ccheck.sh loads its [prod] profile from /p4/common/config/configurables.cfg,
   but mkdirs.sh only rendered the .template files into that dir and never
   copied configurables.cfg across. Copy it verbatim during mkdirs.

With both in place, configure_new_server.sh runs end-to-end standalone and
ccheck reports PASS Grade A. Verified on a test instance.