From a14c5dd3bdfd48746b63a44ad3f7f33d4b3bfe7e Mon Sep 17 00:00:00 2001 From: Travis Rhoden Date: Tue, 4 Aug 2015 12:25:59 -0700 Subject: [PATCH] [RM-12553] Apt repo file mode 0600 when URL has pw Signed-off-by: Travis Rhoden --- ceph_deploy/util/pkg_managers.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/ceph_deploy/util/pkg_managers.py b/ceph_deploy/util/pkg_managers.py index c9bdefc..94fc1ad 100644 --- a/ceph_deploy/util/pkg_managers.py +++ b/ceph_deploy/util/pkg_managers.py @@ -400,10 +400,17 @@ class Apt(PackageManager): self.add_repo_gpg_key(gpg_url) safe_filename = '%s.list' % name.replace(' ', '-') + mode = 0644 + if urlparse(url).password: + mode = 0600 + self.remote_conn.logger.info( + "Creating repo file with mode 0600 due to presence of password" + ) self.remote_conn.remote_module.write_sources_list( url, self.remote_info.codename, - safe_filename + safe_filename, + mode ) # Add package pinning for this repo -- 2.47.3