From 7b7c08797f7e9c5756d7dfe4a9edbfafb3e2a00a Mon Sep 17 00:00:00 2001 From: Paul Belanger Date: Mon, 18 Mar 2019 11:53:45 -0400 Subject: [PATCH] Increase file permissions on config.js It is possible for the config file to contain API keys, remove world readable by default. Change-Id: I85f9345d8c716b98f2aecdd71b711854192835e4 Signed-off-by: Paul Belanger --- defaults/main.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/main.yaml b/defaults/main.yaml index 98cb37a..7ae3fa3 100644 --- a/defaults/main.yaml +++ b/defaults/main.yaml @@ -26,7 +26,7 @@ statsd_user_home: /var/lib/statsd statsd_file_config_js_dest: /etc/statsd/config.js statsd_file_config_js_group: "{{ statsd_user_group }}" -statsd_file_config_js_mode: 0755 +statsd_file_config_js_mode: 0640 statsd_file_config_js_owner: "{{ statsd_user_name }}" statsd_file_config_js_src: etc/statsd/config.js