From 2f2ca62aa67762acdc517b59a1201e4dee2aa7c4 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Tue, 10 Mar 2015 15:33:37 +0000
Subject: [PATCH] (fedimg) keys should be readable, not executable.

---
 roles/fedimg/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/fedimg/tasks/main.yml b/roles/fedimg/tasks/main.yml
index b18f54fd0f..fb8f1029d7 100644
--- a/roles/fedimg/tasks/main.yml
+++ b/roles/fedimg/tasks/main.yml
@@ -63,7 +63,7 @@
 
 - name: copy keys into pki directory for production
   copy: src={{private}}/files/fedimg/{{item}} dest=/etc/pki/fedimg/{{item}}
-        owner=fedmsg group=fedmsg mode=0100
+        owner=fedmsg group=fedmsg mode=0400
   with_items:
   - fedimg-prod
   - fedimg-prod.pub