Implement "Use Correct Filesystem Permissions." hardening advice

[akerouanton]

The Production Hardening guide have the following bullet:

Use Correct Filesystem Permissions. Always ensure appropriate permissions are applied to files prior to starting Vault, especially those containing sensitive information.

This would be implemented through a shell script declared in a ExecStartPre directive of the systemd service (and before starting the daemon in init scripts). It'd have to check for the file perms and owner/group of all the paths declared in this role.

Would such change be accepted by maintainers (if so, I can work on it)?

[bbaassssiiee]

Rather audit the file permissions in this role and create a pull-request for improvements.

[bbaassssiiee]

You could also add Goss or TestInfra tests that users can run.