This repository has been archived by the owner on Apr 12, 2022. It is now read-only.

Change mode of config file away from 644 #173

Open

nicolasberens opened this issue Jan 18, 2022 · 0 comments · May be fixed by #174

nicolasberens commented Jan 18, 2022

Currently the Filebeat Configuration file is world readable:
https://github.com/elastic/ansible-beats/blob/main/tasks/beats-config.yml#L61

since it also can contain a username and password to an elasticsearch cluster, a mode of 0640 might be more appropriate

nicolasberens linked a pull request

that will close this issue

remove right for others to read the config files #174

Open

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.