From d940e20ce1986902006984891d08c04c97e83caa Mon Sep 17 00:00:00 2001 From: Paul Belanger Date: Tue, 24 Nov 2020 11:15:30 -0500 Subject: [PATCH] chmod 0640 /etc/zuul-registry/registry.yaml No need for this to be world readable, we have password inside it. Change-Id: Icc4cfae2bdc6c2b4f70f7fd570e90ce86d5a867c Signed-off-by: Paul Belanger --- defaults/main.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/main.yaml b/defaults/main.yaml index f1289ea..65baa9a 100644 --- a/defaults/main.yaml +++ b/defaults/main.yaml @@ -28,7 +28,7 @@ zuul_registry_user_home_mode: 0755 zuul_registry_file_registry_yaml_dest: /etc/zuul-registry/registry.yaml zuul_registry_file_registry_yaml_group: "{{ zuul_registry_user_group }}" -zuul_registry_file_registry_yaml_mode: 0644 +zuul_registry_file_registry_yaml_mode: 0640 zuul_registry_file_registry_yaml_owner: "{{ zuul_registry_user_name }}" zuul_registry_file_registry_yaml_src: etc/zuul-registry/registry.yaml