openstack
/
tripleo-common
Code Issues Proposed changes

Enforce 0600 permissions on an existing SSH private key file. 

Change-Id: If5d79f75037e252276a76bf010874e374df67e87
Closes-Bug: #1859244
Signed-off-by: Luke Short <ekultails@gmail.com>
This commit is contained in:
Luke Short 2020-01-10 16:08:01 -05:00
parent c25f1db5f6
commit bbca58f2dd
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tripleo_common/actions/ansible.py
View File

@ -276,6 +276,7 @@ class AnsiblePlaybookAction(base.TripleOAction):
# NOTE(flaper87): if it's a path, use it
if (isinstance(self._ssh_private_key, six.string_types) and
os.path.exists(self._ssh_private_key)):
os.chmod(self._ssh_private_key, 0o600)
return self._ssh_private_key
path = os.path.join(self.work_dir, 'ssh_private_key')