commit b28da866f57c565e46af75911819df0d6b9d6be5
author Oleksandr Shyshko <oshyshko@mirantis.com> Fri Dec 07 11:36:40 2018 +0000
committer Oleksandr Shyshko <oshyshko@mirantis.com> Wed Dec 12 13:31:13 2018 +0000
tree b040e7cd034ed9ed824ac33dacebf61cafe43bbc
parent 08c86d1056e40d29af36e6d179d5ada633c7c588

0644 remediation - /etc/mysql/my.cnf

* We have blocked default access to read.

Related-PROD: PROD-25333(PROD-25333)

Change-Id: I958aeca707a0a63541ffa639fa3d8c49d2f1e924

galera/master.sls

diff --git a/galera/master.sls b/galera/master.sls
index 2081ca0..2b47117 100644
--- a/galera/master.sls
+++ b/galera/master.sls
@@ -190,7 +190,8 @@
   file.managed:
   - name: {{ master.config }}
   - source: salt://galera/files/my.cnf.init
-  - mode: 644
+  - mode: 640
+  - group: mysql
   - template: jinja
   - require:
     - service: galera_bootstrap_stop_service
@@ -220,7 +221,8 @@
   file.managed:
   - name: {{ master.config }}
   - source: salt://galera/files/my.cnf
-  - mode: 644
+  - mode: 640
+  - group: mysql
   - template: jinja
   - require_in:
     - service: galera_service

galera/slave.sls

diff --git a/galera/slave.sls b/galera/slave.sls
index 5420424..8b6526a 100644
--- a/galera/slave.sls
+++ b/galera/slave.sls
@@ -188,7 +188,8 @@
   file.managed:
   - name: {{ slave.config }}
   - source: salt://galera/files/my.cnf
-  - mode: 644
+  - mode: 640
+  - group: mysql
   - template: jinja
   - require:
     - service: galera_bootstrap_stop_service
@@ -219,7 +220,8 @@
   file.managed:
   - name: {{ slave.config }}
   - source: salt://galera/files/my.cnf
-  - mode: 644
+  - mode: 640
+  - group: mysql
   - template: jinja
   - require_in:
     - service: galera_service