openstack
/
tripleo-image-elements
Code Issues Proposed changes

Make /etc/os-collect-config.conf only root readable 

This change makes /etc/os-collect-config.conf only readable by root
when os-apply-config overwrites it with credential-containing content.

The credentials are only good for fetching metadata for the server, but
that metadata itself may contain secrets which should be hidden from
non-root users.

Change-Id: I0819ea94afe769d572f03d415dcce164b5f2ccef
Closes-Bug: #1463409
This commit is contained in:
Steve Baker 2015-07-03 10:20:18 +12:00
parent 5e4ec88423
commit 030491bb52
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
elements/os-collect-config/os-apply-config/etc/os-collect-config.conf.oac Normal file
View File

@ -0,0 +1 @@
mode: 0600