[type/__ssh_authorized_key] Set mode 0600 for new files

2020-07-27 10:33:40 +02:00 · 2020-07-27 10:33:40 +02:00 · 15ecab8007
parent 522c5907e2
commit 15ecab8007
1 changed files with 14 additions and 5 deletions
--- a/cdist/conf/type/__ssh_authorized_key/gencode-remote
+++ b/cdist/conf/type/__ssh_authorized_key/gencode-remote
@ -42,11 +42,20 @@ DONE
 }

 add_line() {
-   file="$1"
-   line="$2"
-   # escape single quotes
-   line_sanitised=$(echo "$line" | sed -e "s/'/'\"'\"'/g")
-   printf '%s' "printf '%s\\n' '$line_sanitised' >> $file"
+	file="$1"
+	line="$2"
+
+	# escape single quotes
+	line_sanitised=$(echo "$line" | sed -e "s/'/'\"'\"'/g")
+
+	cat <<-EOF
+	test -f '${file}' || {
+	    :>'${file}'
+	    chmod 0600 '${file}'
+	}
+
+	printf '%s\n' '${line_sanitised}' >>'${file}'
+	EOF
 }