From 7d913374479d140ea8752d0989b5ea4a54b61676 Mon Sep 17 00:00:00 2001 From: L3D Date: Wed, 10 Feb 2021 20:05:04 +0100 Subject: [PATCH] Update file permissions for "{{ gitea_home }}" (#75) The file permissions for {{ gitea_home }} especially in conjunction with the recurse: true flag are on closer inspection very open to all and also have a +x set on files. This should be done better. And I have done here now. By the way: To improve the -x on normal files in his gitea installation this shell command was useful for me ``` find . -type f -exec chmod a-x {} \+; find . -type f -exec chmod u=rwX {} \+; ``` --- tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tasks/main.yml b/tasks/main.yml index 37efc63..af87cf1 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -38,7 +38,7 @@ state: directory owner: "{{ gitea_user }}" group: "{{ gitea_group }}" - mode: '0755' + mode: 'u=rwX,g=rX,o=' recurse: true with_items: - "{{ gitea_home }}"