Landscape charm should configure rsyslog default file permissions to be "$FileCreateMode 0640"

Bug #1991585 reported by Przemyslaw Hausman
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Landscape Charm
New
Undecided
Unassigned

Bug Description

On a CIS hardened node, default file permissions defined in `/etc/rsyslog.d/20-landscape.conf` should configure $FileCreateMode to 0640 or more restrictive.

Instead, default landscape-server configuration defines `$FileCreateMode 0660`.

Revision history for this message
Przemyslaw Hausman (phausman) wrote :

CIS rule requesting this configuration is named "Ensure rsyslog default file permissions configured".

tags: added: cis-hardening
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.