You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
48 lines
2.0 KiB
48 lines
2.0 KiB
From e0c09f9f1388bbce43775f40a39266e692e231da Mon Sep 17 00:00:00 2001
|
|
From: Thorsten Scherf <tscherf@redhat.com>
|
|
Date: Wed, 13 Mar 2024 12:57:34 +0100
|
|
Subject: [PATCH] Fixes log file permissions as per CIS benchmark
|
|
|
|
As per CIS benchmark the log file permissions should be 640 for some log
|
|
files but if we change /var/log/ipa-custodia.audit.log permissions to
|
|
640 then "ipa-healthcheck" reports a permission issue.
|
|
|
|
Fixes: https://github.com/freeipa/freeipa-healthcheck/issues/325
|
|
Signed-off-by: Thorsten Scherf <tscherf@redhat.com>
|
|
---
|
|
src/ipahealthcheck/ipa/files.py | 8 +++++---
|
|
1 file changed, 5 insertions(+), 3 deletions(-)
|
|
|
|
diff --git a/src/ipahealthcheck/ipa/files.py b/src/ipahealthcheck/ipa/files.py
|
|
index b7ca116..d914014 100644
|
|
--- a/src/ipahealthcheck/ipa/files.py
|
|
+++ b/src/ipahealthcheck/ipa/files.py
|
|
@@ -121,7 +121,7 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
|
self.files.append((filename, 'root', 'root', '0600'))
|
|
|
|
self.files.append((paths.IPA_CUSTODIA_AUDIT_LOG,
|
|
- 'root', 'root', '0644'))
|
|
+ 'root', 'root', '0644', '0640'))
|
|
|
|
self.files.append((paths.KADMIND_LOG, 'root', 'root',
|
|
('0600', '0640')))
|
|
@@ -133,11 +133,13 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
|
self.files.append((paths.SLAPD_INSTANCE_ERROR_LOG_TEMPLATE % inst,
|
|
constants.DS_USER, constants.DS_GROUP, '0600'))
|
|
|
|
- self.files.append((paths.VAR_LOG_HTTPD_ERROR, 'root', 'root', '0644'))
|
|
+ self.files.append((paths.VAR_LOG_HTTPD_ERROR, 'root', 'root',
|
|
+ '0644', '0640'))
|
|
|
|
for globpath in glob.glob("%s/debug*.log" % paths.TOMCAT_CA_DIR):
|
|
self.files.append(
|
|
- (globpath, constants.PKI_USER, constants.PKI_GROUP, "0644")
|
|
+ (globpath, constants.PKI_USER, constants.PKI_GROUP,
|
|
+ "0644", "0640")
|
|
)
|
|
|
|
for globpath in glob.glob(
|
|
--
|
|
2.45.0
|
|
|