Change /etc/puppet/puppet.conf mode to 0440
authorAurelien Jarno <aurelien@aurel32.net>
Thu, 8 Dec 2016 14:10:16 +0000 (15:10 +0100)
committerAurelien Jarno <aurelien@aurel32.net>
Thu, 8 Dec 2016 14:10:16 +0000 (15:10 +0100)
It contains a password on the master node.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
modules/debian-org/manifests/init.pp

index 8d64f84..6ec2a0f 100644 (file)
@@ -137,6 +137,7 @@ class debian-org {
        }
        file { '/etc/puppet/puppet.conf':
                content => template('debian-org/puppet.conf.erb'),
+               mode => 0440,
        }
        file { '/etc/default/puppet':
                source => 'puppet:///modules/debian-org/puppet.default',