fix wrong permissions passwdqc dev-sec#170

divialth · Jun 29, 2018 · 44e7431 · 44e7431
1 parent df25471
commit 44e7431
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/pam.yml b/tasks/pam.yml
@@ -35,7 +35,7 @@
   template:
     src: 'pam_passwdqc.j2'
     dest: '{{ passwdqc_path }}'
-    mode: '0640'
+    mode: '0644'
     owner: 'root'
     group: 'root'
   when: (ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu') and os_auth_pam_passwdqc_enable
@@ -56,7 +56,7 @@
   template:
     src: 'pam_tally2.j2'
     dest: '{{ tally2_path }}'
-    mode: '0640'
+    mode: '0644'
     owner: 'root'
     group: 'root'
   when: (ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu') and not os_auth_pam_passwdqc_enable and os_auth_retries > 0