From a920eebc4c0d8b498710ab6e31cb68a3230ac162 Mon Sep 17 00:00:00 2001 From: Lance Edgar Date: Thu, 6 Sep 2018 11:39:36 -0500 Subject: [PATCH] Use 0700 perms for backup-everything script just in case it has secrets --- rattail_fabric/backup.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rattail_fabric/backup.py b/rattail_fabric/backup.py index dbffa64..c73bf05 100644 --- a/rattail_fabric/backup.py +++ b/rattail_fabric/backup.py @@ -43,7 +43,7 @@ def deploy_backup_everything(**context): """ context.setdefault('envname', 'backup') context.setdefault('user', 'rattail') - deploy_generic('backup/backup-everything.mako', '/usr/local/bin/backup-everything', mode='0755', + deploy_generic('backup/backup-everything.mako', '/usr/local/bin/backup-everything', mode='0700', context=context) @@ -91,7 +91,7 @@ def deploy_backup_app(deploy, envname, mkvirtualenv=True, user='rattail', 'user': user, } if everything: - deploy(everything, '/usr/local/bin/backup-everything', mode='0755', context=everything_context) + deploy(everything, '/usr/local/bin/backup-everything', mode='0700', context=everything_context) else: deploy_backup_everything(**everything_context)