From 363d113a1106edc74a45944eb71802a732443904 Mon Sep 17 00:00:00 2001
From: dbk-rabel <57803476+dbk-rabel@users.noreply.github.com>
Date: Mon, 17 Jun 2024 15:04:31 +0200
Subject: [PATCH] Make inventory file mode 600 (#238)

* Make inventory file mode 600

The inventory file that aap_setup_prepare generates contains a lot of credentials, but has very unsafe permissions (664) at the moment.

This commit changes it to 600 permissions.

fixes #237

* Make inventory file mode 640
---
 roles/aap_setup_prepare/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/aap_setup_prepare/tasks/main.yml b/roles/aap_setup_prepare/tasks/main.yml
index dec2643..c8d40e7 100644
--- a/roles/aap_setup_prepare/tasks/main.yml
+++ b/roles/aap_setup_prepare/tasks/main.yml
@@ -34,7 +34,7 @@
   ansible.builtin.template:
     src: inventory.j2
     dest: "{{ aap_setup_prep_setup_dir }}/inventory"
-    mode: "ug=rw,o=r"
+    mode: "640"
   when: aap_setup_prep_process_template | bool
 
 - name: Apply relevant fixes / workarounds