From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 15 Sep 2019 20:27:59 +0000 (+0200)
Subject: Make ssh puppetkeys mode 0444 (instead of 0644)
X-Git-Url: https://wiki.adam-barratt.org.uk/gitweb/?a=commitdiff_plain;h=53435c2038e3ca61c5c76df4b4effa2cfddfcf4f;p=mirror%2Fdsa-puppet.git

Make ssh puppetkeys mode 0444 (instead of 0644)
---

diff --git a/modules/ssh/manifests/authorized_key_collect.pp b/modules/ssh/manifests/authorized_key_collect.pp
index 7c121e4e7..28ba797af 100644
--- a/modules/ssh/manifests/authorized_key_collect.pp
+++ b/modules/ssh/manifests/authorized_key_collect.pp
@@ -7,6 +7,7 @@ define ssh::authorized_key_collect(
   concat { "/etc/ssh/puppetkeys/${target_user}":
     warn           => '# This file is maintained with puppet',
     ensure_newline => true,
+    mode           => '0444',
   }
   Concat::Fragment <<| tag == "ssh::authorized_key::fragment::${collect_tag}::${target_user}" |>>