bb69b667f0
This patch updates all the roles to the latest available SHA's, updates all the OpenStack Service SHA's and also updates the appropriate python requirements pins. Change-Id: Ifc77c02d456500651e8adcaf9338f81601e2c148
11 lines
436 B
YAML
11 lines
436 B
YAML
---
|
|
fixes:
|
|
- |
|
|
The security role previously set the permissions on all audit log files in
|
|
``/var/log/audit`` to ``0400``, but this prevents the audit daemon from
|
|
writing to the active log file. This will prevent ``auditd`` from
|
|
starting or restarting cleanly.
|
|
|
|
The task now removes any permissions that are not allowed by the STIG. Any
|
|
log files that meet or exceed the STIG requirements will not be modified.
|