From 5fce9cb7594fb4a166f996f2bab878e58bb7f03c Mon Sep 17 00:00:00 2001
From: Jeremie Dimino <dimino@crans.org>
Date: Tue, 21 Oct 2008 16:39:08 +0200
Subject: [PATCH] [secrets] laisse les secrets accessibles par l'utilisateur
 respbats et le groupe adm

darcs-hash:20081021143908-af139-d1fd78f1a3fb20d9dcfbf15f2c9ef8e5003e69ec.gz
---
 Python/etc/crans/secrets/secrets.py | 4 +++-
 Rules/rules.xml                     | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/Python/etc/crans/secrets/secrets.py b/Python/etc/crans/secrets/secrets.py
index f6ce355..fc513c3 100644
--- a/Python/etc/crans/secrets/secrets.py
+++ b/Python/etc/crans/secrets/secrets.py
@@ -1,2 +1,4 @@
-info["perms"] = 0600
+info["perms"] = 0440
+info["owner"] = "respbats"
+info["group"] = "adm"
 print file("/etc/crans/secrets/secrets.py").read()
diff --git a/Rules/rules.xml b/Rules/rules.xml
index f23d356..8209d23 100644
--- a/Rules/rules.xml
+++ b/Rules/rules.xml
@@ -26,7 +26,7 @@
 	  timing="post" when="modified" status="check"
 	  command="cat /etc/crans/apt-keys/*.asc | apt-key add -"/>
 
-  <Directory name="/etc/crans/secrets" owner="root" group="root" perms="0700"/>
+  <Directory name="/etc/crans/secrets" owner="respbats" group="adm" perms="0550"/>
 
   <Service name="bcfg2" status="on"/>
   <Service name="bcfg2-server" status="on"/>