File permissions do not match the ones of the net-snmp about puppet-snmp HOT 7 CLOSED

@Tontonitch I'm not a developer of puppet-snmp, but a fellow user. Good catch here given this file has credentials stored that should be kept secret and protected. It seems that the Red Hat family of OSes have the wrong default mode for these files, as you can see here.

Until this gets resolved correctly, I've got the following in my Hiera data:
snmp::service_config_perms: '0600'
Alternatively, you could use something like

class { 'snmp':
  <snip>
  service_config_perms => '0600',
  <snip>
}

Thanks for pointing this out!

from puppet-snmp.

Ok, thanks for your solution John!Best regards,Yannick

  De : John Florian <[email protected]>

À : razorsedge/puppet-snmp [email protected]
Cc : Yannick Charton [email protected]; Mention [email protected]
Envoyé le : Samedi 12 novembre 2016 17h52
Objet : Re: [razorsedge/puppet-snmp] File permissions do not match the ones of the net-snmp (#81)

@Tontonitch I'm not a developer of puppet-snmp, but a fellow user. Good catch here given this file has credentials stored that should be kept secret and protected. It seems that the Red Hat family of OSes have the wrong default mode for these files, as you can see here.Until this gets resolved correctly, I've got the following in my Hiera data:
snmp::service_config_perms: '0600'

Alternatively, you could use something likeclass { 'snmp':

service_config_perms => '0600',

}
Thanks for pointing this out!—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.

from puppet-snmp.

Please make this a parameter. We have certain machines that set the file perms to 0640 and the group to something non-standard. (Rationale: Certain processes need to read that file but we don't want those processes to run as root)

from puppet-snmp.

It already is a parameter. See my comment above. Or I don't understand what you were asking for.

John Florian

from puppet-snmp.

Its all good. Thanks!

from puppet-snmp.

@Tontonitch What OS/OS version/SNMP version are you using?

from puppet-snmp.

RedHat 7.3, Net-Snmp 5.7.2

from puppet-snmp.