Description of problem: The shipped ansible role for configuring cloud connector keeps the receptor.conf file world readable. That file contains service user password in plaintext and therefore must not be readable. Version-Release number of selected component (if applicable): satellite-receptor-installer 0.6.2 How reproducible: 100% Steps to Reproduce: 1. run Configure Cloud Connector 2. ls -l /etc/receptor/*/receptor.conf 3. Actual results: -rw-r--r-- Expected results: -r--------- Additional info:
Verified with Sat 6.7 snap 20. Receptor configuration file is now created with mod 0400 by receptor installation job.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:1454