Projet

Général

Profil

Révision 0b7bcb5d

ID0b7bcb5de9fe26c617dda5ba3e1c8e9310296a24
Parent 0e7fe75e
Enfant 069c9fd2

Ajouté par mh il y a plus de 2 ans

Align filemode on RedHat to distro default

The RPM acutally ships the configuration and directory with
0600/0700 while this module sets the mode to 0640/0750.

However, this has the drawback that on new nftables RPM versions,
we are setting it back to the modules mode and triggering an nft
validate.

Voir les différences:

manifests/config.pp
19 19
      ensure_newline => true,
20 20
      owner          => root,
21 21
      group          => root,
22
      mode           => '0640',
22
      mode           => $nftables::default_config_mode,
23 23
  } ~> Exec['nft validate'] -> file {
24 24
    "/etc/nftables/puppet/${prefix}${name}.nft":
25 25
      ensure => file,
26 26
      source => "/etc/nftables/puppet-preflight/${prefix}${name}.nft",
27 27
      owner  => root,
28 28
      group  => root,
29
      mode   => '0640',
29
      mode   => $nftables::default_config_mode,
30 30
  } ~> Service['nftables']
31 31

  
32 32
  $data = split($name, '-')

Formats disponibles : Unified diff