Add permissions to backup files.

crichez · Aug 1, 2024 · 46c2ba7 · 46c2ba7
1 parent 0e4e33b
commit 46c2ba7
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/roles/uki_config/tasks/main.yaml b/roles/uki_config/tasks/main.yaml
@@ -317,6 +317,12 @@
           ansible.builtin.copy:
             content: "{{ ukify_config_backup.content | b64decode }}"
             dest: "{{ ukify_conf_path }}"
+            owner: root
+            group: root
+            mode: 0644
+            seuser: system_u
+            serole: object_r
+            setype: etc_t
           changed_when: false
 
         - name: Delete new ukify configuration file
@@ -335,13 +341,25 @@
           ansible.builtin.copy:
             content: "{{ dracut_config_backup.content | b64decode }}"
             dest: "{{ dracut_conf_path }}"
+            owner: root
+            group: root
+            mode: 0644
+            seuser: system_u
+            serole: object_r
+            setype: etc_t
           changed_when: false
 
         - name: Delete new dracut configuration file
           when: dracut_config_backup is failed
           ansible.builtin.file:
             path: "{{ dracut_conf_path }}"
             state: absent
+            owner: root
+            group: root
+            mode: 0644
+            seuser: system_u
+            serole: object_r
+            setype: etc_t
           changed_when: false
 
     - name: Restore kernel-install config