majic-ansible-roles Changeset

Changeset - 3a46859c3d4c

Parent rev.

Child rev.

[Not reviewed]

0 3 0

Branko Majic (branko) - 13 months ago 2024-03-03 19:16:27
branko@majic.rs

MAR-192: Apply PAM configuration changes immediatelly for consistency purposes.

3 files changed with 12 insertions and 2 deletions:

roles/common/molecule/default/tests/test_default.py

roles/common/tasks/main.yml

roles/wsgi_website/molecule/default/tests/test_default.py

0 comments (0 inline, 0 general) First comment

roles/common/molecule/default/tests/test_default.py

➞

Show inline comments

@@ @@ -247,7 +247,7 @@ def test_pipreqcheck_virtualenv(host): @@
         assert virtualenv_activate.is_file
         assert virtualenv_activate.user == 'pipreqcheck'
         assert virtualenv_activate.group == 'pipreqcheck'
-        assert virtualenv_activate.mode == 0o644
+        assert virtualenv_activate.mode == 0o640
 def test_pipreqcheck_virtualenv_prompt(host):

roles/common/tasks/main.yml

➞

Show inline comments

@@ @@ -45,9 +45,19 @@ @@
     owner: root
     group: root
     mode: 0644
   register: pam_umask
   notify:
     - Update PAM configuration
 - name: Update PAM configuration  # noqa 503
   # [503] Tasks that run when changed should likely be handlers
   #   In order to have consistent behaviour during the first and
   #   subsequent playbook runs, make sure the PAM configuration is
   #   updated immediatelly. This way any files created by commands etc
   #   should end-up with correct permissions straight away.
   command: "/usr/sbin/pam-auth-update --package"
   when: pam_umask.changed
 - name: Set login UMASK
   lineinfile:
     dest: "/etc/login.defs"

roles/wsgi_website/molecule/default/tests/test_default.py

➞

Show inline comments

         assert virtualenv_activate.is_file
         assert virtualenv_activate.user == expected_owner
         assert virtualenv_activate.group == expected_group
-        assert virtualenv_activate.mode == 0o644
+        assert virtualenv_activate.mode == 0o640
 @pytest.mark.parametrize("project_file, expected_owner, expected_group", [

0 comments (0 inline, 0 general) First comment