From b2714c80f6c312ef8e0e67095daa487cb096fce2 Mon Sep 17 00:00:00 2001
From: Nathan Ward <nward@searchlight.nz>
Date: Thu, 12 Nov 2020 16:44:00 +1300
Subject: [PATCH] Allow anyone to read the dictionary
---
manifests/init.pp | 2 +-
spec/classes/freeradius_spec.rb | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/manifests/init.pp b/manifests/init.pp
index 3a9f41c..0fe113d 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -240,7 +240,7 @@ class freeradius (
concat { "${freeradius::fr_basepath}/dictionary":
owner => 'root',
group => $freeradius::fr_group,
- mode => '0640',
+ mode => '0644',
require => [Package[$freeradius::fr_package], Group[$freeradius::fr_group]],
}
concat::fragment { 'dictionary_header':
diff --git a/spec/classes/freeradius_spec.rb b/spec/classes/freeradius_spec.rb
index 138bdfb..e97136e 100644
--- a/spec/classes/freeradius_spec.rb
+++ b/spec/classes/freeradius_spec.rb
@@ -151,7 +151,7 @@ describe 'freeradius' do
is_expected.to contain_concat('/etc/raddb/dictionary')
.with(
'group' => 'radiusd',
- 'mode' => '0640',
+ 'mode' => '0644',
'owner' => 'root',
)
.that_requires('Package[freeradius]')
--
GitLab