Merge "V-38579: grub.conf owned by root"

2015-10-08 17:20:53 +00:00
parent 6b2302d2f3 a7964a4414
commit 68dd3aa38b
2 changed files with 11 additions and 0 deletions
--- a/doc/source/developer-notes/V-38579.rst
+++ b/doc/source/developer-notes/V-38579.rst
@@ -0,0 +1,2 @@
+Ubuntu 14.04 sets the ownership on ``/boot/grub/grub.cfg`` to root by default.
+The Ansible task will ensure that the secure default is maintained.
--- a/openstack-ansible-security/tasks/boot.yml
+++ b/openstack-ansible-security/tasks/boot.yml
@@ -13,6 +13,15 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

+- name: V-38579 - Bootloader configuration files must be owned by root
+  file:
+    path: /boot/grub/grub.cfg
+    owner: root
+  tags:
+    - boot
+    - cat2
+    - V-38579
+
 - name: V-38581 - Bootloader configuration files must be group-owned by root
  file:
    path: /boot/grub/grub.cfg