inventory file is world-readable - Can we make it only user-readable?

redhat-cop / aap_utilities

Ansible Collection for automated deployment of AAP and other objects for general use

https://galaxy.ansible.com/infra/aap_utilities

GNU General Public License v3.0

74 stars 44 forks source link

Closed dbk-rabel closed 2 weeks ago

dbk-rabel commented 2 weeks ago

Hi.

The inventory file that aap_setup_prepare generates contains a lot of credentials, but is world-readable.

Wouldn't it be better from a security standpoint to make it only readable to the user it belongs?

Shouldn't be problematic to change that in terms of running the setup.sh script.

Yours David