mirror of
https://github.com/xcat2/confluent.git
synced 2025-09-29 13:38:13 +00:00
Tighten permissions on confluent config files
Prior to copying them, make sure only root can interact. The directory should protect them as well, but best to not have anything controversial.
This commit is contained in:
@@ -40,6 +40,7 @@ cp /tmp/allnodes /mnt/etc/ssh/shosts.equiv
|
||||
# carry over deployment configuration and api key for OS install action
|
||||
mkdir -p /mnt/etc/confluent
|
||||
chmod 700 /mnt/etc/confluent
|
||||
chmod 600 /tmp/confluent.*
|
||||
cp /tmp/confluent.* /mnt/etc/confluent/
|
||||
cp -a /tls /mnt/etc/confluent/
|
||||
cp -a /tls/* /mnt/var/lib/ca-certificates/openssl
|
||||
|
Reference in New Issue
Block a user