security upload ftp server: disallow directory listings and download

[mirror/dsa-puppet.git] / modules / roles / manifests / security_upload.pp

diff --git a/modules/roles/manifests/security_upload.pp b/modules/roles/manifests/security_upload.pp
index 4197940..cc1c097 100644 (file)
--- a/modules/roles/manifests/security_upload.pp
+++ b/modules/roles/manifests/security_upload.pp
@@ -10,6 +10,8 @@ class roles::security_upload {
                banner     => 'ftp.security.upload.debian.org FTP server',
                logfile    => '/var/log/ftp/vsftpd-security.upload.debian.org.log',
                writable   => true,
+               readable   => false,
+               listable   => false,
                chown_user => dak-unpriv,
                root       => '/srv/security.upload.debian.org/ftp',
        }