metaconfig: rsyslog: configfile shouldn't be world-readable (can cont…

…ain credentials)
quattor · Jul 21, 2023 · adc7021 · adc7021
1 parent 9789f7e
commit adc7021
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ncm-metaconfig/src/main/metaconfig/rsyslog/pan/config.pan b/ncm-metaconfig/src/main/metaconfig/rsyslog/pan/config.pan
@@ -7,7 +7,7 @@ bind "/software/components/metaconfig/services/{/etc/rsyslog.conf}/contents" = r
 prefix "/software/components/metaconfig/services/{/etc/rsyslog.conf}";
 "daemons/rsyslog" = "restart";
 "module" = "rsyslog/main";
-"mode" = 0644;
+"mode" = 0640;
 
 bind "/software/components" = dict with {
  if (exists(SELF['syslog'])) {