Merge pull request #34 from emning/eyamlperms

Fix eyaml key permissions
voxpupuli · Nov 21, 2014 · 212de3a · 212de3a
2 parents 6453746 + 9abc48d
commit 212de3a
Showing 1 changed file with 10 additions and 5 deletions.
diff --git a/manifests/eyaml.pp b/manifests/eyaml.pp
@@ -39,13 +39,18 @@
     require => Package['hiera-eyaml'],
   }
 
-  $eyaml_files = [
-    "${confdir}/keys/private_key.pkcs7.pem",
-    "${confdir}/keys/public_key.pkcs7.pem"]
 
-  file { $eyaml_files:
+  file { "${confdir}/keys/private_key.pkcs7.pem":
     ensure  => file,
-    mode    => '0604',
+    mode    => '0600',
+    owner   => $owner,
+    group   => $group,
+    require => Exec['createkeys'],
+  }
+
+  file { "${confdir}/keys/public_key.pkcs7.pem":
+    ensure  => file,
+    mode    => '0644',
     owner   => $owner,
     group   => $group,
     require => Exec['createkeys'],