redhat-cop / aap_utilities

Ansible Collection for automated deployment of AAP and other objects for general use
https://galaxy.ansible.com/infra/aap_utilities
GNU General Public License v3.0
81 stars 50 forks source link

inventory file is world-readable - Can we make it only user-readable? #237

Closed dbk-rabel closed 5 months ago

dbk-rabel commented 5 months ago

Hi.

The inventory file that aap_setup_prepare generates contains a lot of credentials, but is world-readable.

Wouldn't it be better from a security standpoint to make it only readable to the user it belongs?

Shouldn't be problematic to change that in terms of running the setup.sh script.

Yours David