diff options
author | mh <mh@immerda.ch> | 2013-03-20 12:01:14 +0100 |
---|---|---|
committer | mh <mh@immerda.ch> | 2013-03-20 12:02:06 +0100 |
commit | e822d6140b1ffea7d85546062376a7e464a3cb61 (patch) | |
tree | a61bf8a320d8150206ea733e341c40711074c6c9 /manifests/plugins | |
parent | 983c0db16a3d21df89623f34908a5236daa74aec (diff) |
Security: plugin-config should not me world readable as it might contain passwords
Diffstat (limited to 'manifests/plugins')
-rw-r--r-- | manifests/plugins/setup.pp | 23 |
1 files changed, 15 insertions, 8 deletions
diff --git a/manifests/plugins/setup.pp b/manifests/plugins/setup.pp index caf2e28..5c56099 100644 --- a/manifests/plugins/setup.pp +++ b/manifests/plugins/setup.pp @@ -1,15 +1,22 @@ class munin::plugins::setup { file { [ '/etc/munin/plugins', '/etc/munin/plugin-conf.d' ]: - ignore => 'snmp_*', - ensure => directory, checksum => mtime, - recurse => true, purge => true, force => true, - mode => 0755, owner => root, group => 0, - notify => Service['munin-node']; + ignore => 'snmp_*', + ensure => directory, + checksum => mtime, + recurse => true, + purge => true, + force => true, + notify => Service['munin-node'], + owner => root, + group => 0, + mode => '0755'; '/etc/munin/plugin-conf.d/munin-node': - ensure => present, - mode => 0644, owner => root, group => 0, - notify => Service['munin-node'], + ensure => present, + notify => Service['munin-node'], + owner => root, + group => 0, + mode => '0640'; } case $::kernel { openbsd: { |