Set permissions for bin and .gnupg

2020-11-12 11:29:33 +01:00 · 2020-11-12 11:29:33 +01:00 · 532eb20d07
commit 532eb20d07
parent 683366b7a4
1 changed files with 8 additions and 1 deletions
--- a/roles/pinentry-wsl/tasks/main.yaml
+++ b/roles/pinentry-wsl/tasks/main.yaml
@ -4,7 +4,7 @@
  file:
      path: "/home/{{ account.name }}/bin"
      state: directory
-      mode: "0777"
+      mode: "0744"

 - name: download script
  become_user: "{{ account.name }}"
@ -25,6 +25,13 @@
      name: gpg-agent
      state: latest

+- name: ensure user/.gnupg exists
+  become_user: "{{ account.name }}"
+  file:
+      path: "/home/{{ account.name }}/.gnupg"
+      state: directory
+      mode: "0700"
+
 - name: enable script in gpg-agent
  become_user: "{{ account.name }}"
  lineinfile: