iron-settings 1.0.1 → 1.0.2

data/History.txt

@@ -1,3 +1,7 @@
+== 1.0.2 / 2013-12-16
+
+* Tweak settings file security check in StaticStore to allow reading files if running as root
+
 == 1.0.1 / 2013-09-09
 
 * Clarify that <owner>.group.entry? returns true if any non-nil value is present, default or explicitly set

data/Version.txt

@@ -1 +1 @@
-1.0.1
+1.0.2

data/lib/iron/settings/class_level.rb

@@ -33,7 +33,7 @@ class Settings #:nodoc:
           Settings::DbStore.new(@settings_class_root, @settings_class_options)
       end
 
-      # Force a settings reload (from db or file(s) depending on settings) regarless
+      # Force a settings reload (from db or file(s) depending on settings) regardless
       # of need to reload automatically.  Useful for testing, but not generally needed in production use
       def reload_settings
         @settings_values.load

data/lib/iron/settings/static_store.rb

@@ -43,7 +43,6 @@ class Settings
     end
 
     # Loads a single settings file, verifying its existence, ownership/security, etc.
-    # 
     def load_file(path)
       # Ensure we have the file, if so required
       raise RuntimeError.new("Missing settings file #{path} - this file is required") unless @ignore_missing || File.exists?(path)
@@ -75,6 +74,10 @@ class Settings
       # Not requiring security?  File doesn't exist?  Then everything is fine...
       return unless (File.exists?(path) && @secure)
       
+      # Root can read all files, useful for backups and of course no security lost
+      return if Process.uid == 0
+      
+      # Check file ownership
       stat = File::Stat.new(path)
       raise RuntimeError.new("Cannot load settings file #{path} - file must be owned by the user this program is running as (UID #{Process.uid})") unless stat.owned?
       raise RuntimeError.new("Cannot load settings file #{path} - file cannot be world-writable") if stat.world_writable?

data/spec/spec_helper.rb

@@ -37,7 +37,7 @@ end
 RSpec.configure do |config|
   config.color = true
   config.add_formatter 'documentation'
-  config.backtrace_clean_patterns = [/rspec/]
+  config.backtrace_exclusion_patterns = [/rspec/]
 end
 
 module SpecHelper

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: iron-settings
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-09-09 00:00:00.000000000 Z
+date: 2013-12-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: iron-extensions