Permissions on fastcgi_params and uwsgi_params files (#1002)

voxpupuli · Jan 20, 2017 · 027fa26 · 027fa26
1 parent ad35502
commit 027fa26
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 7 deletions.
diff --git a/manifests/resource/location.pp b/manifests/resource/location.pp
@@ -413,15 +413,15 @@
   if $ensure == present and $fastcgi != undef and !defined(File[$fastcgi_params]) {
     file { $fastcgi_params:
       ensure  => present,
-      mode    => '0770',
+      mode    => '0644',
       content => template('nginx/server/fastcgi_params.erb'),
     }
   }
 
   if $ensure == present and $uwsgi != undef and !defined(File[$uwsgi_params]) {
     file { $uwsgi_params:
       ensure  => present,
-      mode    => '0770',
+      mode    => '0644',
       content => template('nginx/server/uwsgi_params.erb'),
     }
   }

diff --git a/manifests/resource/server.pp b/manifests/resource/server.pp
@@ -694,15 +694,15 @@
   if $fastcgi != undef and !defined(File[$fastcgi_params]) {
     file { $fastcgi_params:
       ensure  => present,
-      mode    => '0770',
+      mode    => '0644',
       content => template('nginx/server/fastcgi_params.erb'),
     }
   }
 
   if $uwsgi != undef and !defined(File[$uwsgi_params]) {
     file { $uwsgi_params:
       ensure  => present,
-      mode    => '0660',
+      mode    => '0644',
       content => template('nginx/server/uwsgi_params.erb'),
     }
   }

diff --git a/spec/defines/resource_location_spec.rb b/spec/defines/resource_location_spec.rb
@@ -856,7 +856,7 @@
       context 'when fastcgi => "localhost:9000"' do
         let(:params) { { fastcgi: 'localhost:9000', server: 'server1' } }
 
-        it { is_expected.to contain_file('/etc/nginx/fastcgi_params').with_mode('0770') }
+        it { is_expected.to contain_file('/etc/nginx/fastcgi_params').with_mode('0644') }
       end
 
       context 'when uwsgi => "unix:/home/project/uwsgi.socket"' do

diff --git a/spec/defines/resource_server_spec.rb b/spec/defines/resource_server_spec.rb
@@ -997,7 +997,7 @@
           default_params.merge(fastcgi: 'localhost:9000')
         end
 
-        it { is_expected.to contain_file('/etc/nginx/fastcgi_params').with_mode('0770') }
+        it { is_expected.to contain_file('/etc/nginx/fastcgi_params').with_mode('0644') }
       end
 
       context 'when fastcgi_param => {key => value}' do
@@ -1013,7 +1013,7 @@
           default_params.merge(uwsgi: 'uwsgi_upstream')
         end
 
-        it { is_expected.to contain_file('/etc/nginx/uwsgi_params').with_mode('0660') }
+        it { is_expected.to contain_file('/etc/nginx/uwsgi_params').with_mode('0644') }
       end
 
       context 'when listen_port == ssl_port' do