From f7183095c14dbc22641fce0f08d2ff04c446016f Mon Sep 17 00:00:00 2001
From: Jeltz <tom.barthe+aurore@ens-paris-saclay.fr>
Date: Mon, 1 Mar 2021 02:26:22 +0100
Subject: [PATCH] Add explicit permissions for directories

---
 roles/rsyslog_collector/tasks/main.yml | 3 +++
 roles/rsyslog_common/tasks/main.yml    | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/roles/rsyslog_collector/tasks/main.yml b/roles/rsyslog_collector/tasks/main.yml
index 0ee20a2..16a3ab9 100644
--- a/roles/rsyslog_collector/tasks/main.yml
+++ b/roles/rsyslog_collector/tasks/main.yml
@@ -11,6 +11,9 @@
   file:
     path: "{{ rsyslog_collector_base_dir }}"
     state: directory
+    owner: root
+    group: adm
+    mode: u=rwx,g=rwx,o=
 
 - name: Deploy rsyslog input configuration file
   become: true
diff --git a/roles/rsyslog_common/tasks/main.yml b/roles/rsyslog_common/tasks/main.yml
index ce0d35a..c3a0cc3 100644
--- a/roles/rsyslog_common/tasks/main.yml
+++ b/roles/rsyslog_common/tasks/main.yml
@@ -37,6 +37,9 @@
   file:
     path: /etc/systemd/journald.conf.d
     state: directory
+    owner: root
+    group: root
+    mode: u=rwx,g=rx,o=rx
 
 - name: Deploy journald configuration
   become: true