Skip to content

Commit 5bab33f

Browse files
committed
Use stricter permissions for Pulp TLS cert and key
Pulp runs as root inside its container. It has no problem reading files with 0600 permissions. There is no reason use 0644, especially for the key which is readable by any user on the seed.
1 parent 459d7e6 commit 5bab33f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

etc/kayobe/containers/pulp/pre.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
template:
3434
src: "{{ item.src }}"
3535
dest: "/opt/kayobe/containers/pulp/certs/{{ item.dest }}"
36-
mode: 0644
36+
mode: 0600
3737
become: true
3838
loop:
3939
- src: "{{ pulp_cert_path }}"

0 commit comments

Comments
 (0)