saltstack / saltstack/salt

[FEATURE REQUEST] Add mode option to pkgrepo.managed

Open
#60,973 2 comments 0 reactions 1 assignee View on GitHub

@dwoz is already working on this.

Since Sep 29, 2021.

Feature package-repo severity-low
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Is your feature request related to a problem? Please describe.
There should be a mode option to the pkgrepo.managed state. most primary package managers have a way to do basic authenticated on repos in the form https://USER:PASSWORD@repo.example.com. ​

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system_administrators_guide/ch-yum#sec-Setting_repository_Options

With out being able to set the mode on the file generated with pkgrepo.managed this would leak the password to anyone on the system due to the file permissiosn being set to root:root 644.

Describe the solution you'd like
Ideally pkgrepo.managed could pass in a mode=600 to be able to set this in a secure way

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.