Mode 0750 for /var/log/containers
Logs should not be world-readable, they contain sensitive informations.
Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
(cherry picked from commit 57afa87fd9)
This commit is contained in:
@@ -6,6 +6,7 @@
|
||||
state: directory
|
||||
setype: container_file_t
|
||||
selevel: s0
|
||||
mode: 0750
|
||||
tags:
|
||||
- host_config
|
||||
- name: Create ContainerLogStdoutPath directory
|
||||
|
||||
Reference in New Issue
Block a user