starlingx
/
stx-puppet
Code Issues Proposed changes

Fix directory permissions for /var/log/rabbitmq 

Updated /var/log/rabbitmq directory permissions to 750 from 755
to disallow world access to rabbitmq log files but at the same
time to allow group access.
The changes are made to comply as much as possible with
openscap rules security requirements.
Verified that installation is successful for AIO-SX
and Standard 2+2 system configurations.

Story: 2008037
Task: 40694

Change-Id: I1c0112575033c04983c56298e2131882911333de
Signed-off-by: Carmen Rata <carmen.rata@windriver.com>
This commit is contained in:
Carmen Rata 2020-12-01 22:22:57 -05:00
parent c10b5897b9
commit 8ba9e81db4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
puppet-manifests/src/modules/platform/manifests/amqp.pp
View File

@ -30,7 +30,7 @@ class platform::amqp::rabbitmq (
ensure => 'directory',
owner => 'root',
group => 'root',
mode => '0755',
mode => '0750',
}
if $service_enabled {