640 for pubkey and empty pillar

This commit is contained in:
Josh Patterson
2025-04-29 10:19:01 -04:00
parent 102ddaf262
commit 6246e25fbe
2 changed files with 2 additions and 2 deletions

View File

@@ -300,7 +300,7 @@ def _setup_ssh_keys():
# Set proper permissions
os.chmod(key_path, 0o600)
os.chmod(pub_key_path, 0o644)
os.chmod(pub_key_path, 0o640)
log.info("SETUP_KEYS: SSH keys generated successfully")

View File

@@ -29,7 +29,7 @@ def run():
# Set ownership to socore:socore
os.chown(full_path, socore_uid, socore_gid)
# Set mode to 644 (rw-r--r--)
os.chmod(full_path, 0o644)
os.chmod(full_path, 0o640)
logging.error("createEmptyPillar reactor: created %s with socore:socore ownership and mode 644" % f)
except (KeyError, OSError) as e: