From 313314a6749d6f4b3ed54d91d474242425a81c6a Mon Sep 17 00:00:00 2001
From: Otthorn <otthorn@crans.org>
Date: Thu, 11 Mar 2021 23:36:27 +0100
Subject: [PATCH] [borgbackup_client] fix risky file permission on apt config
 for pinning version

---
 roles/borgbackup_client/tasks/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/borgbackup_client/tasks/main.yml b/roles/borgbackup_client/tasks/main.yml
index a337fee..799e36d 100644
--- a/roles/borgbackup_client/tasks/main.yml
+++ b/roles/borgbackup_client/tasks/main.yml
@@ -3,6 +3,9 @@
   template:
     src: "apt/{{ item }}.j2"
     dest: "/etc/apt/{{ item }}"
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=
   loop:
     - sources.list.d/bullseye.list
     - preferences.d/borgmatic-bullseye