From 3b6d5d7cb303dd73d579c8447d75f2f59df5245d Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Thu, 27 Oct 2016 09:03:17 +0000 Subject: [PATCH] Write it out as 0600 Signed-off-by: Patrick Uiterwijk --- roles/keytab/tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/keytab/tasks/main.yml b/roles/keytab/tasks/main.yml index cf61b0e402..0b46c9c654 100644 --- a/roles/keytab/tasks/main.yml +++ b/roles/keytab/tasks/main.yml @@ -80,7 +80,7 @@ when: not host_keytab_status.stat.exists - name: Base64-decode keytab - shell: base64 -d /etc/krb5.keytab.b64 >/etc/krb5.keytab + shell: "umask 077; base64 -d /etc/krb5.keytab.b64 >/etc/krb5.keytab" tags: - base - config