fix: fix insecure file permission and ownership

2024-11-21 15:53:16 +01:00 · 2024-03-03 17:17:19 +01:00 · 2024-03-03 17:17:19 +01:00 · b46f18d437
commit b46f18d437
parent 0621aca3af
1 changed files with 4 additions and 1 deletions
--- a/ansible/configuration/fail2ban/config-f2b-protect-sshd.yaml
+++ b/ansible/configuration/fail2ban/config-f2b-protect-sshd.yaml
@ -10,10 +10,13 @@
          - fail2ban
        update_cache: true

-    - name: Copy fail2ban configfiles
+    - name: Copy fail2ban config file
      ansible.builtin.copy:
        src: configfiles/debian-sshd-default.conf
        dest: /etc/fail2ban/jail.d/debian-sshd-default.conf
+        mode: '0644'
+        owner: root
+        group: root

    - name: Restart fail2ban
      ansible.builtin.systemd_service: