copr-be: more restrictive permissions for provision files

2026-03-20 03:57:02 +08:00 · 2025-10-16 11:29:46 +02:00
parent a22ec30031
commit 7aa8578c1c
2 changed files with 2 additions and 2 deletions
--- a/roles/copr/backend/tasks/resalloc.yml
+++ b/roles/copr/backend/tasks/resalloc.yml
@@ -119,7 +119,7 @@
    dest: "/var/lib/resallocserver/resalloc_provision/"
    rsync_opts:
      - "--chown=resalloc:resalloc"
-      - "--chmod=D775,F664"
+      - "--chmod=D700,F600"
  tags:
  - provision_config

--- a/roles/copr/backend/tasks/setup_provisioning_environment.yml
+++ b/roles/copr/backend/tasks/setup_provisioning_environment.yml
@@ -15,7 +15,7 @@
    dest: "{{ provision_directory }}/"
    rsync_opts:
      - "--chown={{ provision_user }}:{{ provision_user }}"
-      - "--chmod=D775,F664"
+      - "--chmod=D700,F600"
  tags:
  - provision_config