From 32aa16f48366a2dcc85cc0c32dfd6583acf71488 Mon Sep 17 00:00:00 2001
From: Markus Katharina Brechtel <markus.katharina.brechtel@thengo.net>
Date: Fri, 27 Mar 2020 00:27:31 +0100
Subject: [PATCH] local facts shall only be readable by root

---
 tasks/local_facts.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tasks/local_facts.yaml b/tasks/local_facts.yaml
index 206666e..b3f7f64 100644
--- a/tasks/local_facts.yaml
+++ b/tasks/local_facts.yaml
@@ -9,6 +9,7 @@
   copy:
     content: "{{_local_facts|to_json}}"
     dest: /etc/ansible/facts.d/{{role_name}}.fact
+    mode: 0600
   register: _local_facts_set
 
 - name: Gathering Facts