Projet

Général

Profil

Révision 0b7bcb5d

ID0b7bcb5de9fe26c617dda5ba3e1c8e9310296a24
Parent 0e7fe75e
Enfant 069c9fd2

Ajouté par mh il y a plus de 2 ans

Align filemode on RedHat to distro default

The RPM acutally ships the configuration and directory with
0600/0700 while this module sets the mode to 0640/0750.

However, this has the drawback that on new nftables RPM versions,
we are setting it back to the modules mode and triggering an nft
validate.

Voir les différences:

manifests/file.pp
30 30
    ensure  => file,
31 31
    owner   => root,
32 32
    group   => root,
33
    mode    => '0640',
33
    mode    => $nftables::default_config_mode,
34 34
    content => $content,
35 35
    source  => $source,
36 36
  } ~> Exec['nft validate'] -> file { "/etc/nftables/puppet/${prefix}${label}.nft":
37 37
    ensure  => file,
38 38
    owner   => root,
39 39
    group   => root,
40
    mode    => '0640',
40
    mode    => $nftables::default_config_mode,
41 41
    content => $content,
42 42
    source  => $source,
43 43
  } ~> Service['nftables']

Formats disponibles : Unified diff