From 3b65d22667a0d46e3504342550f178ff0e4cdb47 Mon Sep 17 00:00:00 2001
From: Andrey <agrebennikov@mirantis.com>
Date: Tue, 17 Jan 2017 17:14:44 -0600
Subject: [PATCH] Change permission for conf folder

According to the security guide config files should not be
reachable by any users except the owner and root.

Change-Id: I227d3ec74429fbbdf4c8f366c54992faee3bf4a0
---
 tasks/horizon_pre_install.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/horizon_pre_install.yml b/tasks/horizon_pre_install.yml
index bf66b717..34b6b888 100644
--- a/tasks/horizon_pre_install.yml
+++ b/tasks/horizon_pre_install.yml
@@ -38,7 +38,7 @@
     mode: "{{ item.mode|default('0755') }}"
   with_items:
     - { path: "/openstack/venvs", mode: "0755", owner: "root", group: "root" }
-    - { path: "/etc/horizon", mode: "2755" }
+    - { path: "/etc/horizon", mode: "2750" }
     - { path: "{{ horizon_system_user_home }}", mode: "2755" }
 
 - name: Test for log directory or link