Restrict access for 'others'

voxpupuli · Dec 5, 2023 · c679f75 · c679f75
1 parent 7f765ac
commit c679f75
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/manifests/config.pp b/manifests/config.pp
@@ -21,22 +21,22 @@
   if($logstash::ensure == 'present') {
     file { $logstash::config_dir:
       ensure => directory,
-      mode   => '0755',
+      mode   => '0750',
     }
 
     file { "${logstash::config_dir}/conf.d":
       ensure  => directory,
       purge   => $logstash::purge_config,
       recurse => $logstash::purge_config,
-      mode    => '0775',
+      mode    => '0770',
       notify  => Service['logstash'],
     }
 
     file { "${logstash::config_dir}/patterns":
       ensure  => directory,
       purge   => $logstash::purge_config,
       recurse => $logstash::purge_config,
-      mode    => '0755',
+      mode    => '0750',
     }
   }
   elsif($logstash::ensure == 'absent') {

diff --git a/manifests/service.pp b/manifests/service.pp
@@ -39,7 +39,7 @@
   File {
     owner  => $logstash::config_user,
     group  => $logstash::config_group,
-    mode   => '0644',
+    mode   => '0640',
     notify => Exec['logstash-system-install'],
   }