Set '0755' permissions on folder archivematica_src_dir

tasks/automation-tools.yml

@@ -59,6 +59,7 @@
   file:
     dest: "{{ item }}"
     state: "directory"
+    mode: '0755'
   with_items:
     - "/etc/archivematica/automation-tools"
 
@@ -67,6 +68,7 @@
     src: "{{ item }}.j2"
     dest: "/{{ item }}"
     backup: "yes"
+    mode: '644'
   with_items:
     - "etc/archivematica/automation-tools/transfers.conf"
     - "etc/archivematica/automation-tools/transfer-script.sh"

tasks/common.yml

@@ -100,6 +100,7 @@
     file:
       state: "directory"
       path: "{{ archivematica_src_dir }}"
+      mode: '0755'
   when:
     - (archivematica_src_install_am|bool or archivematica_src_install_ss|bool)
 

tasks/configure.yml

@@ -5,6 +5,7 @@
     src: "{{ item }}"
     dest: "/etc/rsyslog.d/archivematica.conf"
     backup: "yes"
+    mode: '644'
   with_first_found:
     - files:
         - "templates/{{ inventory_hostname }}/rsyslog.conf.j2"
@@ -42,19 +43,19 @@
   become: yes
   remote_user: "{{ archivematica_src_configure_ss_ssh_user | default('artefactual') }}"
   register: archivematica_src_configure_ss_api_key_temp
-  when: 
+  when:
      - "archivematica_src_configure_dashboard|bool or archivematica_src_configure_ss|bool"
      - "archivematica_src_configure_ss_api_key is undefined"
      - ss_user.stdout != ""
 
 - set_fact: archivematica_src_configure_ss_api_key="{{ archivematica_src_configure_ss_api_key_temp.stdout }}"
-  when: 
+  when:
     - "archivematica_src_configure_dashboard|bool"
     - "archivematica_src_configure_ss_api_key_temp.stdout is defined"
 
 # Create api-key if not defined and SS user was not already configured
 - set_fact: archivematica_src_configure_ss_api_key={{ 999999999999999999999 | random | to_uuid | hash('md5') }}
-  when: 
+  when:
     - "archivematica_src_configure_ss_api_key is undefined"
     - "archivematica_src_configure_ss|bool"
 
@@ -190,7 +191,7 @@
     - archivematica_src_configure_dashboard|bool
     - archivematica_src_configure_dashboardsettings is defined
 
-# The rsync user is defined in the rsync_target, as user@host:/path 
+# The rsync user is defined in the rsync_target, as user@host:/path
 - name: "Get rsync user for dip upload"
   set_fact:
     atom_dipupload_ssh_user: "{{ archivematica_src_configure_dashboardsettings['rsync_target'].split('@')[0] }}"

tasks/pipeline-clonecode.yml

@@ -31,4 +31,5 @@
     force: "yes"
     accept_hostkey: "yes"
     recursive: "no"
+    umask: '0022'
   become_flags: "-ES"

tasks/pipeline-environment.yml

@@ -34,6 +34,7 @@
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
     backup: "yes"
+    mode: '644'
   with_items:
     - src: "etc/sysconfig/archivematica-mcp-server.j2"
       dest: "{{ systemd_environment_path }}/archivematica-mcp-server"
@@ -45,6 +46,7 @@
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
     backup: "yes"
+    mode: '644'
   with_items:
     - src: "etc/sysconfig/archivematica-mcp-client.j2"
       dest: "{{ systemd_environment_path }}/archivematica-mcp-client"
@@ -96,6 +98,7 @@
     src: "{{ item }}"
     dest: /etc/archivematica/{{ item | basename | regex_replace('\.j2','') }}
     backup: "yes"
+    mode: '644'
   with_first_found:
     - "templates/{{ inventory_hostname }}/dashboard.logging.json.j2"
     - "templates/dashboard.logging.json.j2"
@@ -107,6 +110,7 @@
     src: "{{ item }}"
     dest: /etc/archivematica/{{ item | basename | regex_replace('\.j2','') }}
     backup: "yes"
+    mode: '644'
   with_first_found:
     - "templates/{{ inventory_hostname }}/serverConfig.logging.json.j2"
     - "templates/serverConfig.logging.json.j2"
@@ -118,6 +122,7 @@
     src: "{{ item }}"
     dest: /etc/archivematica/{{ item | basename | regex_replace('\.j2','') }}
     backup: "yes"
+    mode: '644'
   with_first_found:
     - "templates/{{ inventory_hostname }}/clientConfig.logging.json.j2"
     - "templates/clientConfig.logging.json.j2"
@@ -145,6 +150,7 @@
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
     backup: "yes"
+    mode: '644'
   when:
     - "ansible_service_mgr == 'systemd'"
   with_items:
@@ -192,4 +198,3 @@
     - ansible_service_mgr == "systemd"
     - archivematica_src_am_mcpclient_instances > 1
   tags: amsrc-mcp-client
-

tasks/pipeline-instcode.yml

@@ -28,6 +28,7 @@
     backup: "yes"
     force: "yes"
     remote_src: "yes"
+    mode: '0644'
 
 #
 # front-end

tasks/pipeline-osconf.yml

@@ -8,6 +8,7 @@
   file:
     dest: "{{ item }}"
     state: "directory"
+    mode: '0755'
   with_items:
     - "/usr/lib/archivematica"
     - "/usr/share/archivematica"

tasks/ss-main.yml

@@ -96,7 +96,7 @@
     virtualenv: "{{ archivematica_src_ss_virtualenv }}"
     virtualenv_command: "{{ archivematica_src_virtualenv }}"
     virtualenv_python: "{{ archivematica_src_virtualenv_python }}"
-    name: 
+    name:
       - "pip=={{ archivematica_src_pip_version }}"
       - "pip-tools=={{ archivematica_src_pip_tools_version }}"
   tags: "amsrc-ss-pydep"
@@ -147,6 +147,7 @@
   file:
     dest: "{{ item }}"
     state: "directory"
+    mode: '0755'
   with_items:
     - "/etc/archivematica"
   tags: "amsrc-ss-osconf"
@@ -202,6 +203,7 @@
     backup: "yes"
     force: "yes"
     remote_src: "yes"
+    mode: '0644'
   tags: "amsrc-ss-websrv"
 
 

tasks/ss-osconf.yml

@@ -26,6 +26,7 @@
     src: "{{ item }}"
     dest: "/etc/archivematica/storageService.logging.json"
     backup: "yes"
+    mode: '644'
   with_first_found:
     - files:
         - "templates/{{ inventory_hostname }}/storageService.logging.json.j2"