From fe75751b7ed35c652e13b1c9d4edf2292e75305c Mon Sep 17 00:00:00 2001 From: Vadym Chepkov Date: Tue, 7 Jul 2020 19:20:44 -0400 Subject: [PATCH] #106 fix permissions on the key files puppet-enterprise-installer sets ownership to pe-puppet and mode to 0600 for the r10k private key, but does not manage the license key change permissions, so pe-puppet can access license key during catalog compilation --- plans/action/install.pp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/plans/action/install.pp b/plans/action/install.pp index 47022083..475ef8c5 100644 --- a/plans/action/install.pp +++ b/plans/action/install.pp @@ -247,7 +247,7 @@ $master_replica_target, ]), path => '/etc/puppetlabs/puppetserver/ssh/id-control_repo.rsa', - mode => '0400', + mode => '0600', content => $r10k_private_key, ) } @@ -258,7 +258,7 @@ $master_replica_target, ]), path => '/etc/puppetlabs/license.key', - mode => '0400', + mode => '0644', content => $license_key, ) }