From: Travis Rhoden <trhoden@redhat.com>
Date: Tue, 4 Aug 2015 19:25:59 +0000 (-0700)
Subject: [RM-12553] Apt repo file mode 0600 when URL has pw
X-Git-Tag: v1.5.27~4^2~1
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=a14c5dd3bdfd48746b63a44ad3f7f33d4b3bfe7e;p=ceph-deploy.git

[RM-12553] Apt repo file mode 0600 when URL has pw

Signed-off-by: Travis Rhoden <trhoden@redhat.com>
---

diff --git a/ceph_deploy/util/pkg_managers.py b/ceph_deploy/util/pkg_managers.py
index c9bdefc..94fc1ad 100644
--- a/ceph_deploy/util/pkg_managers.py
+++ b/ceph_deploy/util/pkg_managers.py
@@ -400,10 +400,17 @@ class Apt(PackageManager):
             self.add_repo_gpg_key(gpg_url)
 
         safe_filename = '%s.list' % name.replace(' ', '-')
+        mode = 0644
+        if urlparse(url).password:
+            mode = 0600
+            self.remote_conn.logger.info(
+                "Creating repo file with mode 0600 due to presence of password"
+            )
         self.remote_conn.remote_module.write_sources_list(
             url,
             self.remote_info.codename,
-            safe_filename
+            safe_filename,
+            mode
         )
 
         # Add package pinning for this repo