X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fsecurity_upload.pp;h=3963136daa06180e72b5da2a29822105176804f9;hb=d63068dc7d8ace2d3fc0b6076b97b798b24e2b08;hp=4197940dca7729efd40dca6bb53c2d665329d2d0;hpb=bba910ec4bec3ffd6149d4cfc2c42cbfcbca2250;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/security_upload.pp b/modules/roles/manifests/security_upload.pp
index 4197940dc..3963136da 100644
--- a/modules/roles/manifests/security_upload.pp
+++ b/modules/roles/manifests/security_upload.pp
@@ -6,10 +6,19 @@ class roles::security_upload {
 		group	=> debadmin,
 	}
 
+	file { '/etc/ssh/userkeys/dak':
+		ensure  => present,
+		mode    => '644',
+		owner   => dak,
+		group   => debadmin,
+	}
+
 	vsftpd::site { 'security-upload':
 		banner     => 'ftp.security.upload.debian.org FTP server',
 		logfile    => '/var/log/ftp/vsftpd-security.upload.debian.org.log',
 		writable   => true,
+		readable   => false,
+		listable   => false,
 		chown_user => dak-unpriv,
 		root       => '/srv/security.upload.debian.org/ftp',
 	}