From 36ddd6f13c9b47df4151cd23cc93bd92ad342e20 Mon Sep 17 00:00:00 2001
From: Emilien Macchi <emilien@redhat.com>
Date: Mon, 4 Nov 2019 11:06:44 +0100
Subject: [PATCH] Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
(cherry picked from commit 57afa87fd970f879b64233d2c79e946f2afcd2ef)
---
 common/deploy-steps-tasks-step-1.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/common/deploy-steps-tasks-step-1.yaml b/common/deploy-steps-tasks-step-1.yaml
index 5a6415e777..1c895f9d31 100644
--- a/common/deploy-steps-tasks-step-1.yaml
+++ b/common/deploy-steps-tasks-step-1.yaml
@@ -6,6 +6,7 @@
             state: directory
             setype: container_file_t
             selevel: s0
+            mode: 0750
           tags:
             - host_config
         - name: Create ContainerLogStdoutPath directory