openstack/ansible-hardening
Code Issues Proposed changes
Files
c1780c715287e459ace356086128135f8ca8781e
ansible-hardening/doc/metadata/rhel6/V-38623.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup 
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

492 B
Raw Blame History

---id: V-38623 status: implemented tag: file_perms ---

The mode on rsyslog files is set to 0640 by default in Ubuntu 14.04 and Ubuntu 16.04 by default. CentOS 7 sets the mode to 0600 by default. The Ansible tasks will adjust the rsyslog configuration so that any new log files will have the mode set to 0600.

This will take effect the next time that log files are rotated with logrotate (configured in V-38624). Deployers can also make this change manually with chmod.