Browse Source

Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
(cherry picked from commit 57afa87fd9)
changes/11/693311/1
Emilien Macchi 2 years ago
parent
commit
de92a638f8
  1. 1
      common/deploy-steps-tasks.yaml

1
common/deploy-steps-tasks.yaml

@ -34,6 +34,7 @@
state: directory
setype: container_file_t
selevel: s0
mode: 0750
tags:
- host_config
- name: Create ContainerLogStdoutPath directory

Loading…
Cancel
Save