ansible/changelogs/fragments/67794-default-permissions-warning-fix.yml at 3900f82d00b652a76d4f529f6b98d12968bd2bd9 - cmueller/ansible - tilera Git

cmueller/ansible

Sam Doran 5cb96087e6

Fix warning for new default permissions when mode is not specified (#70976 ) (#70985 )

Follow up to #70221
Related to #67794
CVE-2020-1736

When set_mode_if_different() is called with mode of 'None', ensure we issue
a warning about the change in default permissions.

Add integration tests to ensure the warning works properly.

* Fix tests
- actually use custom module 🤦‍♂️
- verify file permission on created files
- use remote_tmp_dir so we're ready for split controller
- improve test module so we can skip the call to set_fs_attributes_if_different()
- fix tests for CentOS 6

(cherry picked from commit dc79528cc6)

2020-07-30 10:10:23 -07:00

4 lines

171 B

YAML

Raw Blame History

 bugfixes:
   - >
     Fix warning for default permission change when no mode is specified. Follow up
     to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736)