Skip to content

Commit

Permalink
Make inventory file mode 600 (#238)
Browse files Browse the repository at this point in the history
* Make inventory file mode 600

The inventory file that aap_setup_prepare generates contains a lot of credentials, but has very unsafe permissions (664) at the moment.

This commit changes it to 600 permissions.

fixes #237

* Make inventory file mode 640
  • Loading branch information
dbk-rabel authored Jun 17, 2024
1 parent c79fdbc commit 363d113
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion roles/aap_setup_prepare/tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@
ansible.builtin.template:
src: inventory.j2
dest: "{{ aap_setup_prep_setup_dir }}/inventory"
mode: "ug=rw,o=r"
mode: "640"
when: aap_setup_prep_process_template | bool

- name: Apply relevant fixes / workarounds
Expand Down

0 comments on commit 363d113

Please sign in to comment.