security fix - for a little while now, since the switch to rsync_command, permissions...

diff --git a/lib/leap_cli/remote/rsync_plugin.rb b/lib/leap_cli/remote/rsync_plugin.rb
index 2c89f2645617af856b5409c6067719be745e5f83..495ca1dc2a6842ba60c03e13a233889b135783ac 100644 (file)
--- a/lib/leap_cli/remote/rsync_plugin.rb
+++ b/lib/leap_cli/remote/rsync_plugin.rb
@@ -14,7 +14,7 @@ module LeapCli; module Remote; module RsyncPlugin
   #   {:source => '', :dest => '', :flags => '', :includes => [], :excludes => []}
   #
   def update
-    rsync = RsyncCommand.new(:logger => logger, :flags => '-a')
+    rsync = RsyncCommand.new(:logger => logger, :flags => '-rltp --chmod=u+rX,go-rwx')
     rsync.asynchronously(find_servers) do |server|
       options = yield server
       next unless options