Browse Source

Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
changes/91/692791/1
Emilien Macchi 2 years ago
parent
commit
57afa87fd9
  1. 1
      common/deploy-steps-tasks-step-1.yaml

1
common/deploy-steps-tasks-step-1.yaml

@ -6,6 +6,7 @@
state: directory
setype: container_file_t
selevel: s0
mode: 0750
tags:
- host_config
- name: Create ContainerLogStdoutPath directory

Loading…
Cancel
Save