Merge pull request dev-sec#300 from danielkubat/master

define file permissions explicitly
divialth · Aug 18, 2020 · c29d950 · c29d950
2 parents 429e135 + 8958d2c
commit c29d950
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/tasks/sysctl.yml b/tasks/sysctl.yml
@@ -72,6 +72,7 @@
   template:
     src: 'etc/default/ufw.j2'
     dest: '/etc/default/ufw'
+    mode: '0644'
   when:
     - ufw_manage_defaults
     - ansible_facts.distribution in ['Debian', 'Ubuntu']

diff --git a/tasks/yum.yml b/tasks/yum.yml
@@ -23,6 +23,7 @@
     path: '{{ item.path }}'
     regexp: '^\s*gpgcheck.*'
     replace: 'gpgcheck=1'
+    mode: '0644'
   with_items:
     - '{{ yum_repos.files | default([]) }}'
 
@@ -34,6 +35,7 @@
     path: '{{ item }}'
     regexp: '^\s*gpgcheck\W.*'
     replace: 'gpgcheck=1'
+    mode: '0644'
   register: status
   failed_when: status.rc is defined and status.rc != 257
   loop: