Browse Source
Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va |grep ^.M" or more salty way: "salt '*' pkg.verify" / salt '*' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch
tags/v0.6.2
Angelo Verona
7 years ago
1 changed files with 1 additions and 1 deletions
+ 1
- 1
firewalld/config.sls
View File
| - name: /etc/firewalld/firewalld.conf | - name: /etc/firewalld/firewalld.conf | ||||
| - user: root | - user: root | ||||
| - group: root | - group: root | ||||
| - mode: 640 | |||||
| - mode: 644 | |||||
| - source: salt://firewalld/files/firewalld.conf | - source: salt://firewalld/files/firewalld.conf | ||||
| - template: jinja | - template: jinja | ||||
| - require: | - require: |
Loading…