config-files/rabbitmq-server-config
Jagatguru Prasad Mishra 1e15570633 Permission change of rabbitmq logrotate
Currently, the permissions for rabbit@localhost.log,
rabbit@localhost_upgrade.log, and their rotated logs are set to
644 after log rotation. To comply with CIS benchmark requirements,
the permissions for these specific files and their rotated logs
need to be more restrictive, set to 640.

This change ensures that rabbit@localhost.log,
rabbit@localhost_upgrade.log, and their rotated logs
(e.g., rabbit@localhost.log.0 and rabbit@localhost_upgrade.log.0)
under /var/log/rabbitmq/ have their permissions updated to 640.

Test Plan:
PASS: Build iso and deploy.
PASS: AIO-SX: Force the log rotation using logrotate and
      config file /etc/logrotate.d/rabbitmq-server. Verify
      that that the permission of files rabbit@localhost.log,
      rabbit@localhost_upgrade.log and its rotated log have
      permission 640.

Story: 2011241
Task: 51511

Change-Id: If46fa58e9f24ee8c4b9d523223d8f37bd175ca84
Signed-off-by: Jagatguru Prasad Mishra <jagatguruprasad.mishra@windriver.com>
2025-02-04 04:46:07 +00:00
..