From: Aurelien Jarno <aurelien@aurel32.net>
Date: Thu, 8 Dec 2016 14:10:16 +0000 (+0100)
Subject: Change /etc/puppet/puppet.conf mode to 0440
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=66ccd5ef78f7208f3d02fd5e9a3d815aadf3ab2d;p=mirror%2Fdsa-puppet.git

Change /etc/puppet/puppet.conf mode to 0440

It contains a password on the master node.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
---

diff --git a/modules/debian-org/manifests/init.pp b/modules/debian-org/manifests/init.pp
index 8d64f8497..6ec2a0ffb 100644
--- a/modules/debian-org/manifests/init.pp
+++ b/modules/debian-org/manifests/init.pp
@@ -137,6 +137,7 @@ class debian-org {
 	}
 	file { '/etc/puppet/puppet.conf':
 		content => template('debian-org/puppet.conf.erb'),
+		mode => 0440,
 	}
 	file { '/etc/default/puppet':
 		source => 'puppet:///modules/debian-org/puppet.default',