From 5c15d0cf46cef4b1d01df49b390cd452d8d41f76 Mon Sep 17 00:00:00 2001
From: micah <micah@muck.riseup.net>
Date: Wed, 20 Mar 2013 14:44:00 -0400
Subject: Security: plugin-config should not me world readable as it might
 contain passwords

---
 manifests/plugin.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/plugin.pp b/manifests/plugin.pp
index a0989a8..d243b66 100644
--- a/manifests/plugin.pp
+++ b/manifests/plugin.pp
@@ -52,7 +52,7 @@ define munin::plugin (
                 default: {
                     file { $plugin_conf:
                         content => "[${name}]\n$config\n",
-                        mode => 0644, owner => root, group => 0,
+                        mode => 0640, owner => root, group => 0,
                     }
                     if $require {
                         File[$plugin_conf]{
-- 
cgit v1.2.3