xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-10 19:46:26 +00:00
Code Issues Projects Releases Wiki Activity

Tighten permissions on netplan files

Browse Source
This commit is contained in:
Jarrod Johnson
2026-08-26 15:36:27 -04:00
parent 6d1733817e
commit bbad91369f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confluent_osdeploy/common/profile/scripts/confignet
+2
View File
@@ -303,9 +303,11 @@ class NetplanManager(object):
prune_from_cloudinit.append(iface)
with open('/etc/netplan/10-{0}-confluentcfg.yaml'.format(iface), 'w') as planout:
planout.write(yaml.dump({'network': {'version': 2, 'ethernets': {iface: {'dhcp4': False}}}}))
os.chmod('/etc/netplan/10-{0}-confluentcfg.yaml'.format(iface), 0o600)
cfgfile = '/etc/netplan/30-{0}-confluentcfg.yaml'.format(devname)
with open(cfgfile, 'w') as planout:
planout.write(yaml.dump(newcfg))
os.chmod(cfgfile, 0o600)
os.umask(oumask)
if prune_from_cloudinit:
prunecfgs = ['/etc/netplan/00-installer-config.yaml',