diff --git a/CHANGELOG.md b/CHANGELOG.md index af42fcb4..fa4175fb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -54,6 +54,7 @@ The **patch** part changes is incremented if multiple releases happen the same m * nagios-nrpe: Fix check opendkim for recent change in listening port * varnish: fix missing state, that blocked the task * proftpd: Fix format of public key files controlled by ansible +* proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody) ### Removed diff --git a/proftpd/tasks/accounts.yml b/proftpd/tasks/accounts.yml index 833cc1c1..4db814ef 100644 --- a/proftpd/tasks/accounts.yml +++ b/proftpd/tasks/accounts.yml @@ -65,7 +65,7 @@ template: dest: "/etc/proftpd/sftp.authorized_keys/{{ _proftpd_account.name }}" src: authorized_keys.j2 - mode: 0600 + mode: 0644 loop: "{{ proftpd_accounts_final }}" loop_control: loop_var: _proftpd_account diff --git a/proftpd/tasks/main.yml b/proftpd/tasks/main.yml index d4fe03f4..f29fbd81 100644 --- a/proftpd/tasks/main.yml +++ b/proftpd/tasks/main.yml @@ -52,7 +52,7 @@ file: path: /etc/proftpd/sftp.authorized_keys/ state: directory - mode: "0700" + mode: "0755" owner: root group: root notify: restart proftpd