From b33d373d3a973153a1315cca3d980e4cfd5db22e Mon Sep 17 00:00:00 2001
From: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl>
Date: Sat, 6 Oct 2018 16:57:12 +0200
Subject: [PATCH] Set database permissions to 0750

This matches the package in EPEL and should provide secure defaults.
---
 manifests/server/config.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/server/config.pp b/manifests/server/config.pp
index dda7f52a4..486af7557 100644
--- a/manifests/server/config.pp
+++ b/manifests/server/config.pp
@@ -122,7 +122,7 @@
 
     file { $dbpath:
       ensure   => directory,
-      mode     => '0755',
+      mode     => '0750',
       owner    => $user,
       group    => $group,
       selrange => 's0',