Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
(cherry picked from commit 57afa87fd9)
This commit is contained in:
Emilien Macchi
2019-11-04 11:06:44 +01:00
parent b2a3a4dd2b
commit 36ddd6f13c
+1
View File
@@ -6,6 +6,7 @@
state: directory
setype: container_file_t
selevel: s0
mode: 0750
tags:
- host_config
- name: Create ContainerLogStdoutPath directory