Protect /etc/salt/grains

Make sure that the permissions of /etc/salt/grains only allow access for the root user.
2016-09-25 17:27:42 +02:00 · 2016-09-25 17:27:42 +02:00 · b90230997c
commit b90230997c
parent cf6dd52186
2 changed files with 8 additions and 0 deletions
--- a/states/base/init.sls
+++ b/states/base/init.sls
@ -11,6 +11,13 @@ base-packages:
      - git
      - locales-all

+/etc/salt/grains:
+  file.managed:
+    - user: root
+    - group: root
+    - mode: 0600
+    - replace: False
+
 /home/vagrant/.screenrc:
  file.managed:
    - user: vagrant