Ignore Bandit's B103(set_bad_file_permissions)

When external authentication is involved, we should allow these systems
to write to salt's bus?
This commit is contained in:
Pedro Algarvio 2021-01-28 08:45:05 +00:00 committed by Megan Wilhite
parent e3cb97a4ed
commit fd9f9e94f8

View file

@ -1146,7 +1146,7 @@ class EventPublisher(salt.utils.process.SignalHandlingProcess):
if self.opts["ipc_mode"] != "tcp" and (
self.opts["publisher_acl"] or self.opts["external_auth"]
):
os.chmod(
os.chmod( # nosec
os.path.join(self.opts["sock_dir"], "master_event_pub.ipc"),
0o666,
)