Reduce permissions for app configuration

silkeh · silkeh · commit e44a9701dc04 · 2018-09-23T18:17:16.000+02:00
Having the app configuration world readable may expose the content of
more sensitive environment variables. Remove the 'other' permissions
to mitigate this.
diff --git a/manifests/app.pp b/manifests/app.pp
@@ -43,7 +43,7 @@
     ensure  => $ensure,
     owner   => $uid,
     group   => $gid,
-    mode    => '0644',
+    mode    => '0640',
     content => template($template),
     notify  => Service['uwsgi'],
   }

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@`
`43`	`43`	`ensure => $ensure,`
`44`	`44`	`owner => $uid,`
`45`	`45`	`group => $gid,`
`46`		`- mode => '0644',`
	`46`	`+ mode => '0640',`
`47`	`47`	`content => template($template),`
`48`	`48`	`notify => Service['uwsgi'],`
`49`	`49`	`}`