Skip to content

Commit

Permalink
installerpod: change config map based files mode to 0600
Browse files Browse the repository at this point in the history
To be more compliant with CIS benchmarks
  • Loading branch information
ingvagabund committed Jun 21, 2023
1 parent 504ca4b commit 6de88d6
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pkg/operator/staticpod/installerpod/cmd.go
Expand Up @@ -625,7 +625,7 @@ func (o *InstallOptions) writePod(rawPodBytes []byte, manifestFileName, resource
func writeConfig(content []byte, fullFilename string) error {
klog.Infof("Writing config file %q ...", fullFilename)

filePerms := os.FileMode(0644)
filePerms := os.FileMode(0600)
if strings.HasSuffix(fullFilename, ".sh") {
filePerms = 0755
}
Expand Down

0 comments on commit 6de88d6

Please sign in to comment.