Mode 0750 for /var/log/containers

Logs should not be world-readable, they contain sensitive informations.

Change-Id: I97bdc6344816ca04e9afaeb939690aa367d4b33f
(cherry picked from commit 57afa87fd9)
This commit is contained in:
Emilien Macchi 2019-11-04 11:06:44 +01:00
parent f83dd8cf41
commit de92a638f8
1 changed files with 1 additions and 0 deletions

View File

@ -34,6 +34,7 @@
state: directory state: directory
setype: container_file_t setype: container_file_t
selevel: s0 selevel: s0
mode: 0750
tags: tags:
- host_config - host_config
- name: Create ContainerLogStdoutPath directory - name: Create ContainerLogStdoutPath directory