From 4df3070a1d1ccc03a57c30c6342b87cba3041d08 Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Thu, 24 Apr 2025 12:59:06 -0400
Subject: [PATCH] ensure file permissions of libvirt images

---
 salt/libvirt/images/init.sls | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/salt/libvirt/images/init.sls b/salt/libvirt/images/init.sls
index 43fc400bd..40017b3a5 100644
--- a/salt/libvirt/images/init.sls
+++ b/salt/libvirt/images/init.sls
@@ -16,6 +16,15 @@
 include:
   - libvirt.packages
 
+nsm_libvirt_images:
+  file.directory:
+    - name: /nsm/libvirt/images/sool9
+    - dir_mode: 775
+    - file_mode: 640
+    - recurse:
+      - mode
+    - makedirs: True
+
 # Remove hash file if image isn't present. This will allow for the image to redownload and initialize.
 remove_sha256_sool9:
   file.absent:
@@ -27,7 +36,6 @@ manage_sha256_sool9:
   file.managed:
     - name: /nsm/libvirt/images/sool9/sool9.sha256
     - source: salt://libvirt/images/sool9/sool9.sha256
-    - makedirs: True
 
 # Manage cloud-init files
 manage_metadata_sool9: