openstack/openstack-ansible-os_keystone
Code Issues Proposed changes

Change permission for conf folder

Browse Source 
According to the security guide config files should not be
reachable by any users except the owner and root.

Change-Id: I5caba528ae85a8209de7637ecfdd9407e10ea0df
This commit is contained in:
Andrey 2017-01-17 15:40:17 -06:00 committed by Jesse Pretorius (odyssey4me)
parent dd2f1f9b02
commit 0c57099367
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/keystone_pre_install.yml
View File

@ -57,7 +57,7 @@
mode: "{{ item.mode|default(0755) }}"
with_items:
- { path: "/openstack", mode: "0755", owner: "root", group: "root" }
- { path: "/etc/keystone" }
- { path: "/etc/keystone", mode: "0750" }
- { path: "{{ keystone_ldap_domain_config_dir }}" }
- { path: "/etc/keystone/ssl" }
- { path: "{{ keystone_fernet_tokens_key_repository }}", mode: "2750"}