Skip to content

Commit 4c88ca0

Browse files
committed
Reduce permissions for app configuration
Having the app configuration world readable may expose the content of more sensitive environment variables. Remove the 'other' permissions to mitigate this.
1 parent 071e78f commit 4c88ca0

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

manifests/app.pp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@
4343
ensure => $ensure,
4444
owner => $uid,
4545
group => $gid,
46-
mode => '0644',
46+
mode => '0640',
4747
content => template($template),
4848
notify => Service['uwsgi'],
4949
}

spec/defines/app_spec.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
'ensure' => 'present',
3030
'owner' => 'test',
3131
'group' => 'test',
32-
'mode' => '0644'
32+
'mode' => '0640'
3333
)
3434
end
3535
else
@@ -39,7 +39,7 @@
3939
'ensure' => 'present',
4040
'owner' => 'test',
4141
'group' => 'test',
42-
'mode' => '0644'
42+
'mode' => '0640'
4343
)
4444
end
4545
end
@@ -50,7 +50,7 @@
5050
'ensure' => 'present',
5151
'owner' => 'test',
5252
'group' => 'test',
53-
'mode' => '0644'
53+
'mode' => '0640'
5454
)
5555
end
5656
end

0 commit comments

Comments
 (0)