Skip to content

Commit

Permalink
make ssh_authorized_key readonly
Browse files Browse the repository at this point in the history
This is a rather bold and naive move to just plainly fix puppetlabs#92. It makes
all authorized_keys  generated by this module to be readonly, publicly
readable. This might break some things, and is untested.

A proper solution would probably be to hook into a File resource there
that could be overriden properly.

Fundamentally, the problem here is that we are managing multiple
resources that hit the same actual file on disk: ideally, we'd have a
mode parameter to the resource here, but then we could get into
conflicts if multiple invocations of ssh_authorized_key use different
mode parameters.
  • Loading branch information
anarcat committed Nov 21, 2024
1 parent da321a4 commit caa5789
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/puppet/provider/ssh_authorized_key/parsed.rb
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ def dir_perm
end

def file_perm
0o600
0o444
end

def group_writable_perm
Expand Down

0 comments on commit caa5789

Please sign in to comment.