From 44e7431cc9775507f6348d5b425edc5e250e14f6 Mon Sep 17 00:00:00 2001
From: Sebastian Gumprich <sebastian.gumprich@38.de>
Date: Fri, 29 Jun 2018 20:14:23 +0200
Subject: [PATCH] fix wrong permissions passwdqc #170

---
 tasks/pam.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tasks/pam.yml b/tasks/pam.yml
index ce95ea3e1..ed0423a01 100644
--- a/tasks/pam.yml
+++ b/tasks/pam.yml
@@ -35,7 +35,7 @@
   template:
     src: 'pam_passwdqc.j2'
     dest: '{{ passwdqc_path }}'
-    mode: '0640'
+    mode: '0644'
     owner: 'root'
     group: 'root'
   when: (ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu') and os_auth_pam_passwdqc_enable
@@ -56,7 +56,7 @@
   template:
     src: 'pam_tally2.j2'
     dest: '{{ tally2_path }}'
-    mode: '0640'
+    mode: '0644'
     owner: 'root'
     group: 'root'
   when: (ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu') and not os_auth_pam_passwdqc_enable and os_auth_retries > 0