openstack/openstack-ansible-os_nova
Code Issues Proposed changes

Merge "Implementing stricter permissions on config files"

Browse Source
This commit is contained in:
Jenkins 2017-02-10 05:47:47 +00:00 committed by Gerrit Code Review
commit 0278377022
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
tasks/nova_post_install.yml
View File

@ -29,9 +29,9 @@
config_template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: "{{ item.owner|default(nova_system_user_name) }}"
owner: "root"
group: "{{ item.group|default(nova_system_group_name) }}"
mode: "0644"
mode: "0640"
config_overrides: "{{ item.config_overrides }}"
config_type: "{{ item.config_type }}"
with_items:
@ -41,8 +41,6 @@
config_type: "ini"
- src: "rootwrap.conf.j2"
dest: "/etc/nova/rootwrap.conf"
owner: "root"
group: "root"
config_overrides: "{{ nova_rootwrap_conf_overrides }}"
config_type: "ini"
- src: "api-paste.ini.j2"