openstack
/
openstack-ansible-os_keystone
Code Issues Proposed changes

Change permission for conf folder 

According to the security guide config files should not be
reachable by any users except the owner and root.

Change-Id: I5caba528ae85a8209de7637ecfdd9407e10ea0df
This commit is contained in:
Andrey 2017-01-17 15:40:17 -06:00 committed by Jesse Pretorius (odyssey4me)
parent dd2f1f9b02
commit 0c57099367
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/keystone_pre_install.yml
View File

@ -57,7 +57,7 @@
mode: "{{ item.mode|default(0755) }}"
with_items:
- { path: "/openstack", mode: "0755", owner: "root", group: "root" }
- { path: "/etc/keystone" }
- { path: "/etc/keystone", mode: "0750" }
- { path: "{{ keystone_ldap_domain_config_dir }}" }
- { path: "/etc/keystone/ssl" }
- { path: "{{ keystone_fernet_tokens_key_repository }}", mode: "2750"}