Make sshd_config mode 600 for rhel systems (chr4-cookbooks#18)

* make sshd_config mode 600 for rhel systems * bump version * change attribute name to sshd_config_mode, and undo version bump
mikecraig6810 · Aug 17, 2017 · 196e035 · 196e035
1 parent dec9c0d
commit 196e035
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/attributes/default.rb b/attributes/default.rb
@@ -71,6 +71,15 @@
   'GSSAPIAuthentication' => 'no'
 }
 
+# sshd_config permissions
+default['sshd']['sshd_config_mode'] =
+  case node['platform_family']
+  when 'debian', 'mac_os_x'
+    '0o644'
+  when 'rhel', 'fedora'
+    '0o600'
+  end
+
 # Initialize sftp subsystem
 default['sshd']['sshd_config']['Subsystem'] =
   case node['platform_family']

diff --git a/definitions/openssh_server.rb b/definitions/openssh_server.rb
@@ -48,7 +48,7 @@ class Chef::Recipe
   template filename do
     owner     'root'
     group     node['root_group']
-    mode      0o644
+    mode      node['sshd']['sshd_config_mode']
     cookbook  cookbook
     source    source
     variables config: sshd_config