Skip to content

Commit 9fbdaff

Browse files
authored
fixed permission gap and with updating beats-security.yml (#362)
add permissions and waiting for check. Findings 27,34,42
1 parent be04945 commit 9fbdaff

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

roles/beats/tasks/beats-security.yml

+6
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,8 @@
4141
src: /etc/beats/certs
4242
dest: "/etc/beats/certs_{{ ansible_date_time.iso8601_micro }}"
4343
mode: preserve
44+
owner: root
45+
group: root
4446
remote_src: true
4547
when: beats_check_cert_path.stat.exists
4648
register: beats_move_cert_directory
@@ -68,6 +70,8 @@
6870
src: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-beats.zip"
6971
dest: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-beats.zip_{{ ansible_date_time.iso8601_micro }}"
7072
mode: preserve
73+
owner: root
74+
group: root
7175
remote_src: true
7276
when: beats_check_cert_file.stat.exists
7377
register: beats_move_cert_file
@@ -95,6 +99,8 @@
9599
src: "{{ lookup('config', 'DEFAULT_LOCAL_TMP') | dirname }}/{{ ansible_hostname }}-beats.zip"
96100
dest: "{{ lookup('config', 'DEFAULT_LOCAL_TMP') | dirname }}/{{ ansible_hostname }}-beats.zip_{{ ansible_date_time.iso8601_micro }}"
97101
mode: preserve
102+
owner: root
103+
group: root
98104
when: beats_check_temporary_cert.stat.exists
99105
register: beats_move_cert_file
100106

0 commit comments

Comments
 (0)