set the owner/group and mode of the chroot directory properly

"It is important to ensure that <jail_dir> is both empty and unwritable to
anyone."

reference: http://cbonte.github.com/haproxy-dconv/configuration-1.4.html#3-chroot

1 files changed, 5 insertions, 1 deletions

diff --git a/manifests/init.pp b/manifests/init.pp
index a0c191d..7815769 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -113,7 +113,11 @@ class haproxy (
     }
 
     file { $global_options['chroot']:
-      ensure => directory,
+      ensure  => directory,
+      owner   => $global_options['user'],
+      group   => $global_options['group'],
+      mode    => '0550',
+      require => Package['haproxy']
     }
 
   }