summaryrefslogtreecommitdiff
path: root/manifests/plugins
diff options
context:
space:
mode:
authormh <mh@immerda.ch>2013-03-20 12:01:14 +0100
committermh <mh@immerda.ch>2013-03-20 12:02:06 +0100
commite822d6140b1ffea7d85546062376a7e464a3cb61 (patch)
treea61bf8a320d8150206ea733e341c40711074c6c9 /manifests/plugins
parent983c0db16a3d21df89623f34908a5236daa74aec (diff)
Security: plugin-config should not me world readable as it might contain passwords
Diffstat (limited to 'manifests/plugins')
-rw-r--r--manifests/plugins/setup.pp23
1 files changed, 15 insertions, 8 deletions
diff --git a/manifests/plugins/setup.pp b/manifests/plugins/setup.pp
index caf2e28..5c56099 100644
--- a/manifests/plugins/setup.pp
+++ b/manifests/plugins/setup.pp
@@ -1,15 +1,22 @@
class munin::plugins::setup {
file {
[ '/etc/munin/plugins', '/etc/munin/plugin-conf.d' ]:
- ignore => 'snmp_*',
- ensure => directory, checksum => mtime,
- recurse => true, purge => true, force => true,
- mode => 0755, owner => root, group => 0,
- notify => Service['munin-node'];
+ ignore => 'snmp_*',
+ ensure => directory,
+ checksum => mtime,
+ recurse => true,
+ purge => true,
+ force => true,
+ notify => Service['munin-node'],
+ owner => root,
+ group => 0,
+ mode => '0755';
'/etc/munin/plugin-conf.d/munin-node':
- ensure => present,
- mode => 0644, owner => root, group => 0,
- notify => Service['munin-node'],
+ ensure => present,
+ notify => Service['munin-node'],
+ owner => root,
+ group => 0,
+ mode => '0640';
}
case $::kernel {
openbsd: {