Skip to content

Commit 7df38b7

Browse files
committed
use more restrictive mode on temp paths
I get this on each run here: Notice: /Stage[main]/Nginx::Config/File[/run/nginx/client_body_temp]/mode: mode changed '0700' to '0755' Notice: /Stage[main]/Nginx::Config/File[/run/nginx/proxy_temp]/mode: mode changed '0700' to '0755' It seems like nginx and this module have different opinions on the correct mode for those directories. I believe Nginx is more correct, and we should therefore follow it. Note that this might apply to your module only if you have a global File default resource defined. Closes: #1272
1 parent 66b86dc commit 7df38b7

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

manifests/config.pp

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -209,13 +209,15 @@
209209
file { $client_body_temp_path:
210210
ensure => directory,
211211
owner => $daemon_user,
212+
mode => '0700',
212213
}
213214
}
214215

215216
if $proxy_temp_path {
216217
file { $proxy_temp_path:
217218
ensure => directory,
218219
owner => $daemon_user,
220+
mode => '0700',
219221
}
220222
}
221223

0 commit comments

Comments
 (0)