Restrict access for 'others'

Phil Friderici · Phil Friderici · commit a79abc24448c · 2023-11-24T15:38:33.000Z
diff --git a/manifests/config.pp b/manifests/config.pp
@@ -21,22 +21,22 @@
   if($logstash::ensure == 'present') {
     file { $logstash::config_dir:
       ensure => directory,
-      mode   => '0755',
+      mode   => '0750',
     }
 
     file { "${logstash::config_dir}/conf.d":
       ensure  => directory,
       purge   => $logstash::purge_config,
       recurse => $logstash::purge_config,
-      mode    => '0775',
+      mode    => '0770',
       notify  => Service['logstash'],
     }
 
     file { "${logstash::config_dir}/patterns":
       ensure  => directory,
       purge   => $logstash::purge_config,
       recurse => $logstash::purge_config,
-      mode    => '0755',
+      mode    => '0750',
     }
   }
   elsif($logstash::ensure == 'absent') {
diff --git a/manifests/service.pp b/manifests/service.pp
@@ -39,7 +39,7 @@
   File {
     owner  => $logstash::logstash_user,
     group  => $logstash::logstash_group,
-    mode   => '0644',
+    mode   => '0640',
     notify => Exec['logstash-system-install'],
   }
 

Original file line number	Diff line number	Diff line change
`@@ -21,22 +21,22 @@`
`21`	`21`	`if($logstash::ensure == 'present') {`
`22`	`22`	`file { $logstash::config_dir:`
`23`	`23`	`ensure => directory,`
`24`		`- mode => '0755',`
	`24`	`+ mode => '0750',`
`25`	`25`	`}`
`26`	`26`
`27`	`27`	`file { "${logstash::config_dir}/conf.d":`
`28`	`28`	`ensure => directory,`
`29`	`29`	`purge => $logstash::purge_config,`
`30`	`30`	`recurse => $logstash::purge_config,`
`31`		`- mode => '0775',`
	`31`	`+ mode => '0770',`
`32`	`32`	`notify => Service['logstash'],`
`33`	`33`	`}`
`34`	`34`
`35`	`35`	`file { "${logstash::config_dir}/patterns":`
`36`	`36`	`ensure => directory,`
`37`	`37`	`purge => $logstash::purge_config,`
`38`	`38`	`recurse => $logstash::purge_config,`
`39`		`- mode => '0755',`
	`39`	`+ mode => '0750',`
`40`	`40`	`}`
`41`	`41`	`}`
`42`	`42`	`elsif($logstash::ensure == 'absent') {`
Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,7 @@`
`39`	`39`	`File {`
`40`	`40`	`owner => $logstash::logstash_user,`
`41`	`41`	`group => $logstash::logstash_group,`
`42`		`- mode => '0644',`
	`42`	`+ mode => '0640',`
`43`	`43`	`notify => Exec['logstash-system-install'],`
`44`	`44`	`}`
`45`	`45`