From 7da792fbd40c0e6eae1ee093aa00e0b177bd2ebc Mon Sep 17 00:00:00 2001
From: Ryan Coleman <ryan@puppetlabs.com>
Date: Thu, 7 Feb 2013 13:42:38 -0800
Subject: [PATCH] Restrict permissions on cinder configuration

Prior to this commit, the puppetlabs-cinder module applied the mode
0644 to the File[$::cinder::params::cinder_conf] resource which
were too permissive. This commit explicitly sets the mode to 0600.
---
 manifests/base.pp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/manifests/base.pp b/manifests/base.pp
index 01e2acac..dd00f734 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -32,7 +32,10 @@ class cinder::base (
     require => Package[$::cinder::params::package_name],
   }
 
-  file { $::cinder::params::cinder_conf: }
+  file { $::cinder::params::cinder_conf:
+    mode => '0600',
+  }
+
   file { $::cinder::params::cinder_paste_api_ini: }
 
   # Temporary fixes