it-team/lmn-client
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deny access to sensitive data for other users

Browse source
This commit is contained in:
Raphael Dannecker 2026-04-15 11:30:41 +02:00
parent 55fbda871c
commit c709bceab9
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/lmn_vm/files/vm-run
View file

@ -208,6 +208,8 @@ EOF
QEMU='qemu:///session' QEMU='qemu:///session'
umask 077
NEWCLONE=0 NEWCLONE=0
PERSISTENT=0 PERSISTENT=0
LIBVIRTOSINFO="win10" LIBVIRTOSINFO="win10"

2
roles/lmn_vm/tasks/main.yml
View file

@ -222,7 +222,7 @@
Description=Create .vminfo.json for VMs Description=Create .vminfo.json for VMs
[Service] [Service]
Type=simple Type=simple
ExecStart=/usr/bin/bash -c 'umask 027; /usr/local/bin/vm-vminfo > "{% if localhome %}/home{% else %}/lmn/media{% endif %}/${USER}/.vminfo.json"' ExecStart=/usr/bin/bash -c 'umask 077; /usr/local/bin/vm-vminfo > "{% if localhome %}/home{% else %}/lmn/media{% endif %}/${USER}/.vminfo.json"'
dest: /etc/systemd/user/vminfo.service dest: /etc/systemd/user/vminfo.service
mode: '0644' mode: '0644'