From work in MFOR-935, noticed that the files that are backed up from /root/xcat-tools/cron_scripts/backup-node_configs.sh are stored in directories that are not locked down to root.
Not too many (if any) non-root users coming onto the xcat nodes, but since we are backing up sensitive files like keytabs it's a good idea to make sure only root can access these files.
Tested on ngale and verified that xcat could still backup new files and restore files with the more locked down permissions set.
From work in MFOR-935, noticed that the files that are backed up from
/root/xcat-tools/cron_scripts/backup-node_configs.share stored in directories that are not locked down to root.Not too many (if any) non-root users coming onto the xcat nodes, but since we are backing up sensitive files like keytabs it's a good idea to make sure only root can access these files.
Tested on ngale and verified that xcat could still backup new files and restore files with the more locked down permissions set.