Skip to content

Commit

Permalink
Change configuration perms on Linux (#313)
Browse files Browse the repository at this point in the history
Prevent main & check configuration files to be read by everybody.
The reason is they can contains some secrets.

Fix #312
  • Loading branch information
loliee authored Dec 1, 2020
1 parent d907342 commit 808c84e
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions tasks/agent-linux.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@
template:
src: datadog.yaml.j2
dest: /etc/datadog-agent/datadog.yaml
mode: 0640
owner: "{{ datadog_user }}"
group: "{{ datadog_group }}"
notify: restart datadog-agent
Expand All @@ -32,6 +33,7 @@
template:
src: checks.yaml.j2
dest: "/etc/datadog-agent/conf.d/{{ item }}.d/conf.yaml"
mode: 0640
owner: "{{ datadog_user }}"
group: "{{ datadog_group }}"
with_items: "{{ datadog_checks|list }}"
Expand Down

0 comments on commit 808c84e

Please sign in to comment.