From 53435c2038e3ca61c5c76df4b4effa2cfddfcf4f Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 15 Sep 2019 22:27:59 +0200
Subject: [PATCH] Make ssh puppetkeys mode 0444 (instead of 0644)

---
 modules/ssh/manifests/authorized_key_collect.pp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/ssh/manifests/authorized_key_collect.pp b/modules/ssh/manifests/authorized_key_collect.pp
index 7c121e4e7..28ba797af 100644
--- a/modules/ssh/manifests/authorized_key_collect.pp
+++ b/modules/ssh/manifests/authorized_key_collect.pp
@@ -7,6 +7,7 @@ define ssh::authorized_key_collect(
   concat { "/etc/ssh/puppetkeys/${target_user}":
     warn           => '# This file is maintained with puppet',
     ensure_newline => true,
+    mode           => '0444',
   }
   Concat::Fragment <<| tag == "ssh::authorized_key::fragment::${collect_tag}::${target_user}" |>>
 
-- 
2.20.1