add follow=yes to my.cnf protect task, incase its a symlink. fixes #20

[rndmh3ro]

@fitz123, care to review and merge?

[fitz123]

@rndmh3ro Not sure how safe it is.
Did you test and confirm role fully works with both my.cnf as a symlink and a real file (for example permissions set right)? If so I see no issues to merge.

[rndmh3ro]

That's safe, I use it all the time.
The "follow" really means follow in this case, so when you set the perms to 600 and the destination is a symlink, then not the symlink gets changed but the target of the symlink.

So in the case mentioned in the issue:

andrej@vagrant:~$ ls -lah /etc/mysql/my.cnf
lrwxrwxrwx 1 root root 24 Oct 8 04:42 /etc/mysql/my.cnf -> /etc/alternatives/my.cnf

/etc/alternatives/my.cnf will have perms 600.