Skip to content

Commit

Permalink
iscsi: fix ownership on iscsi-gateway.cfg
Browse files Browse the repository at this point in the history
This file is currently deployed with '0644' ownership making this file
readable by any user on the system.
Since it contains sensitive information it should be readable by the
owner only.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1890119

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
  • Loading branch information
guits committed Oct 21, 2020
1 parent 1cc9666 commit a822f77
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions roles/ceph-iscsi-gw/tasks/common.yml
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,7 @@
dest: /etc/ceph/iscsi-gateway.cfg
config_type: ini
config_overrides: '{{ iscsi_conf_overrides }}'
mode: "0600"
notify: restart ceph rbd-target-api-gw

- name: set_fact container_exec_cmd
Expand Down

0 comments on commit a822f77

Please sign in to comment.