puppetlabs/puppetlabs-activemq — pull request #37 by Asher256 (2014-12-02 23:32:48+00:00)
Title: Permissions of activemq.xml

In the current version of the module "activemq", the permissions of "/etc/activemq/instances-available/mcollective/activemq.xml" are owned by root and can be read by everyone :
-rw-rw-r-- 1 activemq activemq 6.3K Dec 2 22:12 activemq.xml

Activemq.xml contains passwords (in my case, it can contain MCollective passwords and truststore/keystore passwords).

This patch will protect activemq.xml by giving the root/root/0600.