path security issue (getting root privileges)

2 months ago · 97496ef4b8
parent 0b40cc4b9b
commit 97496ef4b8
2 changed files with 4 additions and 1 deletions
--- a/group_vars/router/prometheus.yml
+++ b/group_vars/router/prometheus.yml
@ -0,0 +1,3 @@
+---
+prometheus_keepalived__dest: /var/run/prometheus-node-exporter/keepalived.prom
+... 
--- a/roles/prometheus_node/tasks/main.yml
+++ b/roles/prometheus_node/tasks/main.yml
@ -28,7 +28,7 @@
    state: directory
    owner: root
    group: root
-    mode: u=rwx,g=rw,o=rw
+    mode: u=rwx,g=rx,o=rx

 - name: Override prometheus-node-exporter.service
  template: