ceph
/
ceph-ansible
mirror of https://github.com/ceph/ceph-ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

iscsi: fix ownership on iscsi-gateway.cfg 

This file is currently deployed with '0644' ownership making this file
readable by any user on the system.
Since it contains sensitive information it should be readable by the
owner only.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1890119

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
(cherry picked from commit a822f77300)
pull/5987/head
Guillaume Abrioux 2020-10-21 14:26:57 +02:00 committed by Dimitri Savineau
parent a6dac8c93d
commit 3eed44907b
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/ceph-iscsi-gw/tasks/common.yml
View File

@ -44,6 +44,7 @@
dest: /etc/ceph/iscsi-gateway.cfg dest: /etc/ceph/iscsi-gateway.cfg
config_type: ini config_type: ini
config_overrides: '{{ iscsi_conf_overrides }}' config_overrides: '{{ iscsi_conf_overrides }}'
mode: "0600"
notify: restart ceph rbd-target-api-gw notify: restart ceph rbd-target-api-gw
- name: set_fact container_exec_cmd - name: set_fact container_exec_cmd