Skip to content

Commit

Permalink
Use stricter permissions for Pulp TLS cert and key
Browse files Browse the repository at this point in the history
Pulp runs as root inside its container. It has no problem reading files
with 0600 permissions. There is no reason use 0644, especially for the
key which is readable by any user on the seed.
  • Loading branch information
priteau committed Feb 10, 2023
1 parent 459d7e6 commit 5bab33f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion etc/kayobe/containers/pulp/pre.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
template:
src: "{{ item.src }}"
dest: "/opt/kayobe/containers/pulp/certs/{{ item.dest }}"
mode: 0644
mode: 0600
become: true
loop:
- src: "{{ pulp_cert_path }}"
Expand Down

0 comments on commit 5bab33f

Please sign in to comment.