collectd: modified collectd scripts directory and scripts files right so that only _collectd group can execute them

CHANGELOG

@@ -70,6 +70,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * base: install bash, now needed for zzz_evobackup script
 * base: dump-server-state.sh upstream release 23.03
 * post-install: execute motd-carp-state.sh only once an hour
+* collectd: modified collectd scripts directory and scripts files right so that only _collectd group can execute them
 
 ### Fixed
 

roles/collectd/tasks/main.yml

@@ -26,6 +26,9 @@
   file:
     path: /usr/local/share/collectd/scripts
     state: directory
+    owner: "root"
+    group: "_collectd"
+    mode: "0710"
   when: collectd_plugin_exec_ifq_drops or collectd_plugin_exec_dns_stats or collectd_plugin_exec_dhcp_pool
   tags:
     - collectd
@@ -34,7 +37,9 @@
   copy:
     src: ifq_drops.sh
     dest: /usr/local/share/collectd/scripts/ifq_drops.sh
-    mode: 0755
+    owner: "root"
+    group: "_collectd"
+    mode: "0710"
     force: true
   when: collectd_plugin_exec_ifq_drops
   tags:
@@ -52,7 +57,9 @@
   copy:
     src: dns_stats.sh
     dest: /usr/local/share/collectd/scripts/dns_stats.sh
-    mode: 0755
+    owner: "root"
+    group: "_collectd"
+    mode: "0710"
     force: true
   when: collectd_plugin_exec_dns_stats
   tags:
@@ -78,7 +85,9 @@
   copy:
     src: dhcp_pool.pl
     dest: /usr/local/share/collectd/scripts/dhcp_pool.pl
-    mode: 0755
+    owner: "root"
+    group: "_collectd"
+    mode: "0710"
     force: true
   when: collectd_plugin_exec_dhcp_pool
   tags: