openstack/openstack-ansible-security
Code Issues Proposed changes
9efb8153f1
openstack-ansible-security/doc/metadata/rhel6/V-38579.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup 
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

490 B
Raw Blame History

---id: V-38579 status: implemented tag: boot ---

Ubuntu 14.04 sets the ownership on /boot/grub/grub.cfg to root by default. The Ansible task will ensure that the secure default is maintained.

In Ubuntu 16.04 and CentOS 7, the bootloader configuration files in /boot/grub2 are owned by the root user by default.

Deployers should monitor these files for changes in ownership, permissions and contents. The aide daemon is installed by the security role to monitor these files.