Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
This commit is contained in:
Emilien Macchi 2019-11-04 11:06:44 +01:00
parent b851cd611b
commit 57afa87fd9
1 changed files with 1 additions and 0 deletions

View File

@ -6,6 +6,7 @@
state: directory
setype: container_file_t
selevel: s0
mode: 0750
tags:
- host_config
- name: Create ContainerLogStdoutPath directory