From e2a2eb6f36c71037b7d0e7ef21f775d12fdd6a92 Mon Sep 17 00:00:00 2001
From: poloz <polozfr@laposte.net>
Date: Thu, 4 Aug 2022 15:13:24 +0200
Subject: [PATCH] Remove access from the filebeat config to others since
 credentials are stored in it

---
 manifests/filebeat_oss.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/filebeat_oss.pp b/manifests/filebeat_oss.pp
index d33bcfb8..68601e8b 100644
--- a/manifests/filebeat_oss.pp
+++ b/manifests/filebeat_oss.pp
@@ -34,7 +34,7 @@
   file { '/etc/filebeat/filebeat.yml':
     owner   => 'root',
     group   => 'root',
-    mode    => '0644',
+    mode    => '0640',
     notify  => Service['filebeat'], ## Restarts the service
     content => template('wazuh/filebeat_oss_yml.erb'),
     require => Package['filebeat'],