fixed file permissions

.ansible-lint

@@ -1,4 +1,3 @@
 # This makes linter to fully ignore rules/tags listed below
 skip_list:
   - unnamed-task
-  - risky-file-permissions

tasks/albert.yml

@@ -28,3 +28,4 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/albert"
     dest: "~/.config/"
+    mode: 0600

tasks/dropbox.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/dropbox.gpg"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Dropbox key
   become: true

tasks/google-chrome.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/google_linux_signing_key.pub"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Google Chrome apt key
   become: true
@@ -25,6 +26,7 @@
   file:
     path: /etc/default/google-chrome
     state: touch
+    mode: 0644
   when: etc_default_google_chrome.stat.exists is defined and not etc_default_google_chrome.stat.exists
 
 - name: Add Google Chrome apt repository

tasks/java-packages.yml

@@ -6,6 +6,7 @@
   file:
     path: '/usr/share/man/man1'
     state: directory
+    mode: 0755
 
 - name: Install Java Packages
   become: true
@@ -24,6 +25,7 @@
   file:
     path: '~/.jdk'
     state: directory
+    mode: 0775
 
 - name: Create Java links
   file:

tasks/kde-configurations.yml

@@ -2,6 +2,7 @@
 - name: Meta for Expose (Toggle Present Windows)
   community.general.ini_file:
     path: ~/.config/kwinrc
+    mode: 0600
     section: ModifierOnlyShortcuts
     option: Meta
     value: org.kde.kglobalaccel,/component/kwin,org.kde.kglobalaccel.Component,invokeShortcut,Expose
@@ -10,6 +11,7 @@
 - name: Desktop effects
   community.general.ini_file:
     path: ~/.config/kwinrc
+    mode: 0600
     section: '{{ item.section }}'
     option: '{{ item.option }}'
     value: '{{ item.value }}'
@@ -28,6 +30,7 @@
 - name: Switcher
   community.general.ini_file:
     path: ~/.config/kwinrc
+    mode: 0600
     section: '{{ item.section }}'
     option: '{{ item.option }}'
     value: '{{ item.value }}'
@@ -43,6 +46,7 @@
 - name: Meta+X for ExposeAll (Toggle Present Windows (All desktops))
   community.general.ini_file:
     path: ~/.config/kglobalshortcutsrc
+    mode: 0600
     section: kwin
     option: ExposeAll
     value: Ctrl+F10\tLaunch (C)\tMeta+Z,Ctrl+F10\tLaunch (C),Toggle Present Windows (All desktops)
@@ -51,6 +55,7 @@
 - name: Meta+Z for ExposeClass (Toggle Present Windows (Window class))
   community.general.ini_file:
     path: ~/.config/kglobalshortcutsrc
+    mode: 0600
     section: kwin
     option: ExposeClass
     value: Meta+X\tCtrl+F7,Ctrl+F7,Toggle Present Windows (Window class)
@@ -59,6 +64,7 @@
 - name: Alt+\ (Walk Through Windows of Current Application)
   community.general.ini_file:
     path: ~/.config/kglobalshortcutsrc
+    mode: 0600
     section: kwin
     option: Walk Through Windows of Current Application
     value: Alt+\\\\,Alt+`,Walk Through Windows of Current Application
@@ -80,6 +86,7 @@
 - name: Kate preferences
   community.general.ini_file:
     path: ~/.config/katerc
+    mode: 0600
     section: '{{ item.section }}'
     option: '{{ item.option }}'
     value: '{{ item.value }}'
@@ -98,16 +105,19 @@
 - name: Create Konsole profile directory
   file:
     path: '~/.local/share/konsole'
+    mode: 0775
     state: directory
 
 - name: Copy Konsole profiles
   copy:
     src: "{{ playbook_dir }}/tasks/files/konsole/"
     dest: "~/.local/share/konsole/"
+    mode: 0644
 
 - name: Yakuake preferences
   community.general.ini_file:
     path: ~/.config/yakuakerc
+    mode: 0600
     section: '{{ item.section }}'
     option: '{{ item.option }}'
     value: '{{ item.value }}'
@@ -129,6 +139,7 @@
 - name: Create autostart-scripts directory
   file:
     path: '~/.config/autostart-scripts'
+    mode: 0775
     state: directory
 
 - name: Copy ssh-add scripts

tasks/kde-gnome-packages.yml

@@ -13,7 +13,7 @@
 
 - name: Ensure xdg mime default application is set
   command: "xdg-mime default {{ item[0].desktop_file }} {{ item[1] }}"
-  changed_when: False
+  changed_when: false
   with_subelements:
     - "{{ xdg_mime_defaults }}"
     - mime_types
@@ -27,6 +27,7 @@
 - name: Kate preferences
   community.general.ini_file:
     path: ~/.config/katerc
+    mode: 0600
     section: '{{ item.section }}'
     option: '{{ item.option }}'
     value: '{{ item.value }}'

tasks/kernel-mainline.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/kernel-mainline.pub"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Mainline key
   become: true

tasks/recoll.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/recoll_signing_key.pub"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Recoll key
   become: true
@@ -41,8 +42,10 @@
   file:
     path: '~/.recoll'
     state: directory
+    mode: 0775
 
 - name: Set Recoll configuration
   copy:
     src: "{{ playbook_dir }}/tasks/files/recoll/"
     dest: "~/.recoll/"
+    mode: 0600

tasks/skype.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/skype.pub"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Skype key
   become: true

tasks/touchegg.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/touchegg_signing_key.pub"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add Touchegg key
   become: true

tasks/vscode.yml

@@ -6,6 +6,7 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/keys/microsoft.asc"
     dest: "/tmp/"
+    mode: 0600
 
 - name: Add VS apt key
   become: true

tasks/zsh-antigen.yml

@@ -21,3 +21,4 @@
   copy:
     src: "{{ playbook_dir }}/tasks/files/antigen/"
     dest: "~/"
+    mode: 0600