openstack
/
charm-mysql-router
Code Issues Proposed changes

Update logrotate template to create 0640 log files 

CIS Hardening will complain if logrotate is configured to
create world readable log files.
The directory containing log files has a restricted access
to mysql user only anyway

Closes-bug: #1993146
Change-Id: If346ebb7bdb1839b2ec83d991840b559c5c0c3e4
This commit is contained in:
Olivier Dufour-Cuvillier 2022-10-18 12:19:55 +09:00
parent 2b73548263
commit cd2738e4a7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/templates/logrotate
View File

@ -2,7 +2,7 @@
rotate 9
notifempty
size 10M
create 0644 {{ owner }} {{ group }}
create 0640 {{ owner }} {{ group }}
postrotate
kill -HUP $(pidof mysqlrouter)
endscript