Skip to content

Commit caa5789

Browse files
committed
make ssh_authorized_key readonly
This is a rather bold and naive move to just plainly fix #92. It makes all authorized_keys generated by this module to be readonly, publicly readable. This might break some things, and is untested. A proper solution would probably be to hook into a File resource there that could be overriden properly. Fundamentally, the problem here is that we are managing multiple resources that hit the same actual file on disk: ideally, we'd have a mode parameter to the resource here, but then we could get into conflicts if multiple invocations of ssh_authorized_key use different mode parameters.
1 parent da321a4 commit caa5789

File tree

1 file changed

+1
-1
lines changed
  • lib/puppet/provider/ssh_authorized_key

1 file changed

+1
-1
lines changed

lib/puppet/provider/ssh_authorized_key/parsed.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ def dir_perm
3939
end
4040

4141
def file_perm
42-
0o600
42+
0o444
4343
end
4444

4545
def group_writable_perm

0 commit comments

Comments
 (0)