Make docker config files unreadable

2022-09-12 20:29:43 +02:00 · 2022-09-12 20:29:43 +02:00 · aaebdd2839
commit aaebdd2839
parent 38d21aa99b
1 changed files with 4 additions and 0 deletions
--- a/ansible/misc-docker.yaml
+++ b/ansible/misc-docker.yaml
@ -6,6 +6,10 @@
      copy:
        src: ../docker
        dest: /etc/pbri
+        # Files should inaccessible to non-root users.
+        mode: u=rw,g=,o=
+        # Directories should be listable
+        directory_mode: u=rwx,g=rx,o=rx
    - name: Create global docker volumes
      become: yes
      docker_volume: