Fixes #16139: Files distributed via apache but download by the agent …

…on relays have the wrong permissions
Normation · Nov 7, 2019 · 272b329 · 272b329
1 parent 88b6f9f
commit 272b329
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/techniques/system/distributePolicy/1.0/propagatePromises.st b/techniques/system/distributePolicy/1.0/propagatePromises.st
@@ -92,6 +92,7 @@ bundle agent propagatePromises
       "${client_data}"  #that's a loop on each files in client_inputs
         copy_from    => remote("${server_info.policy_server}","${server_data}"),
         depth_search => recurse_visible("inf"),
+        perms => mog("740", "root", "rudder-policy-reader"),
         comment => "Fetching the promises to propagate",
         classes => if_else("promises_propagated", "could_not_propagate_promises");