Merge pull request #1067 from kbpease/kbpease/fix-sudoers.d-vagrant-p…

…erms Set correct permissions on /etc/sudoers.d/vagrant
chef · Jun 26, 2018 · 5d3ead7 · 5d3ead7
2 parents 1100b28 + 7f74581
commit 5d3ead7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/centos/http/6/ks.cfg b/centos/http/6/ks.cfg
@@ -69,6 +69,7 @@ virt-what
 sed -i -e 's/\(^SELINUX=\).*$/\1permissive/' /etc/selinux/config
 # sudo
 echo "%vagrant ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/vagrant
+chmod 0440 /etc/sudoers.d/vagrant
 
 #Enable hyper-v daemons only if using hyper-v virtualization
 if [ $(virt-what) == "hyperv" ]; then

diff --git a/centos/http/7/ks.cfg b/centos/http/7/ks.cfg
@@ -64,6 +64,7 @@ deltarpm
 %post
 # sudo
 echo "%vagrant ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/vagrant
+chmod 0440 /etc/sudoers.d/vagrant
 
 #Enable hyper-v daemons only if using hyper-v virtualization
 if [ $(virt-what) == "hyperv" ]; then