cobbler: set the mode to 0440 on /etc/sudoers.d/cephlab_sudo

Apparently most other distros default anything in /etc/sudoers.d to
0440 except precise. Precise, by default, sets the mode of
/etc/sudoers.d/cephlab_sudo to 0664 which completely breaks sudo usage.
This makes cobbler explicitly set the mode to 0440.

Signed-off-by: Andrew Schoen <aschoen@redhat.com>

diff --git a/roles/cobbler/templates/snippets/cephlab_user b/roles/cobbler/templates/snippets/cephlab_user
index d85ad82abb5268e02df1be214e050706d65ad246..456ce4730d8bd8b3e5d7e5d186a7a94723cf3f45 100644 (file)
--- a/roles/cobbler/templates/snippets/cephlab_user
+++ b/roles/cobbler/templates/snippets/cephlab_user
@@ -13,6 +13,8 @@ Defaults !requiretty
 Defaults visiblepw
 EOF
 
+chmod 0440 /etc/sudoers.d/cephlab_sudo
+
 install -d -m0755 --owner=$user --group=$user /home/$user/.ssh 
 
 cat >> $auth_keys << EOF