Skip to content

security: setting mode=0755 on a home directory #6

@flybyray

Description

@flybyray

I do not expect a mode=0755 here.

- name: create directory for git configuration
ansible.builtin.file:
path: /home/{{ git_username }}
state: directory
owner: "{{ git_username | default(omit) }}"
group: "{{ git_groupname | default(omit) }}"
mode: "0755"
when:
- getent_passwd is defined
- getent_passwd[git_username] != none

This might raise a security issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions