openstack/ansible-hardening
Code Issues Proposed changes
Files
a841e184dec7e4023e0ea3e963d1ac4edf4fe41a
ansible-hardening/doc/source/developer-notes/V-38623.rst
Major Hayden a841e184de Docs: Update dev notes for Cat 2 controls 
This patch updates the documentation for the developer notes associated
with the Cat 2 (Medium) controls applied by the security role.

Partial-bug: 1583744

Change-Id: Ic342f33942521db009185585a21208a4688f6ed3
2016-05-25 11:38:13 -05:00

435 B
Raw Blame History

The mode on rsyslog files is set to 0640 by default in Ubuntu 14.04 and Ubuntu 16.04 by default. CentOS 7 sets the mode to 0600 by default. The Ansible tasks will adjust the rsyslog configuration so that any new log files will have the mode set to 0600.

This will take effect the next time that log files are rotated with logrotate (configured in V-38624). Deployers can also make this change manually with chmod.