From 91922175cd5f9ea1bb613c7f46c2c96b6734530a Mon Sep 17 00:00:00 2001
From: Jeremy Dubois <jdubois@evolix.fr>
Date: Tue, 12 Jul 2022 10:30:23 +0200
Subject: [PATCH] etc-git: chmod 600 for local periodic files (daily, weekly,
 monthly) - forgotten ones

---
 roles/base/tasks/evobackup.yml | 4 ++--
 roles/etc-git/tasks/utils.yml  | 2 +-
 roles/evocheck/tasks/main.yml  | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/roles/base/tasks/evobackup.yml b/roles/base/tasks/evobackup.yml
index be0d7d2..ebe1682 100644
--- a/roles/base/tasks/evobackup.yml
+++ b/roles/base/tasks/evobackup.yml
@@ -24,7 +24,7 @@
     path: /etc/daily.local
     line: '#sh /usr/share/scripts/zzz_evobackup'
     owner: root
-    mode: "0644"
+    mode: "0600"
     create: true
   when:
     - not (daily_local_content.stdout
@@ -38,7 +38,7 @@
     line: 'next_part "EvoBackup output:"'
     insertbefore: 'sh /usr/share/scripts/zzz_evobackup'
     owner: root
-    mode: "0644"
+    mode: "0600"
     create: true
   tags:
     - evobackup
diff --git a/roles/etc-git/tasks/utils.yml b/roles/etc-git/tasks/utils.yml
index c3f7ef8..66100ec 100644
--- a/roles/etc-git/tasks/utils.yml
+++ b/roles/etc-git/tasks/utils.yml
@@ -63,7 +63,7 @@
     path: /etc/daily.local
     line: "{{ item }}"
     owner: root
-    mode: "0644"
+    mode: "0600"
     state: absent
   with_items:
     - 'next_part "Checking /etc git status:"'
diff --git a/roles/evocheck/tasks/main.yml b/roles/evocheck/tasks/main.yml
index da305da..f48690f 100644
--- a/roles/evocheck/tasks/main.yml
+++ b/roles/evocheck/tasks/main.yml
@@ -43,7 +43,7 @@
     insertbefore: BOF
     line: 'if [ $(date +%d) -eq "01" ]; then cron_arg=""; else cron_arg="--cron"; fi'
     owner: root
-    mode: "0644"
+    mode: "0600"
     create: true
   tags:
     - evocheck
@@ -54,7 +54,7 @@
     insertafter: 'if [ $(date +%d) -eq "01" ]; then cron_arg=""; else cron_arg="--cron"; fi'
     line: 'sh /usr/share/scripts/evocheck.sh --verbose $cron_arg'
     owner: root
-    mode: "0644"
+    mode: "0600"
     create: true
   tags:
     - evocheck
@@ -65,7 +65,7 @@
     line: 'next_part "Evocheck output:"'
     insertbefore: 'if [ $(date +%d) -eq "01" ]; then cron_arg=""; else cron_arg="--cron"; fi'
     owner: root
-    mode: "0644"
+    mode: "0600"
     create: true
   tags:
     - evocheck