openstack/puppet-cinder
Code Issues Proposed changes

Restrict permissions on cinder configuration

Browse Source 
Prior to this commit, the puppetlabs-cinder module applied the mode
0644 to the File[$::cinder::params::cinder_conf] resource which
were too permissive. This commit explicitly sets the mode to 0600.
This commit is contained in:
Ryan Coleman 2013-02-07 13:42:38 -08:00
parent 2a4f3db5a3
commit 7da792fbd4
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
manifests/base.pp
View File

@ -32,7 +32,10 @@ class cinder::base (
require => Package[$::cinder::params::package_name], require => Package[$::cinder::params::package_name],
} }
file { $::cinder::params::cinder_conf: } file { $::cinder::params::cinder_conf:
mode => '0600',
}
file { $::cinder::params::cinder_paste_api_ini: } file { $::cinder::params::cinder_paste_api_ini: }
# Temporary fixes # Temporary fixes