From c0e53775066a91f5249c367408c72df04d9ff363 Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sat, 20 Feb 2010 21:25:07 +0000 Subject: [PATCH] permissions fixup Signed-off-by: Stephen Gran --- modules/ferm/manifests/init.pp | 2 +- modules/ferm/manifests/real.pp | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index c07449fb1..0fa60634d 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -4,7 +4,7 @@ class ferm { ensure => present, owner => root, group => root, - mode => 0600, + mode => 0400, content => template("ferm/ferm-rule.erb"), notify => Exec["ferm restart"], } diff --git a/modules/ferm/manifests/real.pp b/modules/ferm/manifests/real.pp index e3a1a0fa7..23fe0bbe6 100644 --- a/modules/ferm/manifests/real.pp +++ b/modules/ferm/manifests/real.pp @@ -9,14 +9,17 @@ class ferm::real inherits ferm { "/etc/ferm/ferm.conf": source => "puppet:///ferm/ferm.conf", require => Package["ferm"], + mode => 0400, notify => Exec["ferm restart"]; "/etc/ferm/conf.d/me.conf": content => template("ferm/me.conf.erb"), require => Package["ferm"], + mode => 0400, notify => Exec["ferm restart"]; "/etc/ferm/conf.d/defs.conf": source => "puppet:///ferm/defs.conf", require => Package["ferm"], + mode => 0400, notify => Exec["ferm restart"]; } -- 2.20.1