openstack-ansible-security/doc/metadata/rhel6/V-38579.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

16 lines
490 B
ReStructuredText

---
id: V-38579
status: implemented
tag: boot
---
Ubuntu 14.04 sets the ownership on ``/boot/grub/grub.cfg`` to root by default.
The Ansible task will ensure that the secure default is maintained.
In Ubuntu 16.04 and CentOS 7, the bootloader configuration files in
``/boot/grub2`` are owned by the root user by default.
Deployers should monitor these files for changes in ownership, permissions and
contents. The ``aide`` daemon is installed by the security role to monitor
these files.