modules/acme: Set the private key filemode to 0640

Closes #48627
This commit is contained in:
Nicolas Braud-Santoni 2018-07-17 22:51:55 +02:00
parent 47b1032efa
commit 98af0db826

View file

@ -180,7 +180,7 @@ def cert(name,
comment = 'Certificate {0} obtained'.format(name)
ret = {'comment': comment, 'not_after': expires(name)}
res = __salt__['file.check_perms'](_cert_file(name, 'privkey'), {}, owner, group, '0600', follow_symlinks=True)
res = __salt__['file.check_perms'](_cert_file(name, 'privkey'), {}, owner, group, '0640', follow_symlinks=True)
if res is None:
ret['result'] = False