From cd396fc557ad4842e40c6cdbe5f4fe98cac4b95a Mon Sep 17 00:00:00 2001 From: Jagatguru Prasad Mishra Date: Mon, 18 Nov 2024 05:06:40 -0500 Subject: [PATCH] Update permission of ceph-init.log Currently, /var/log/ceph/ceph-init.log have permission 644. To comply with the CIS benchmark requirements, the permissions should be set to 640. This change updates the permissions of /var/log/ceph/ceph-init.log to 640. Test Plan: PASS: Build ISO and deploy AIO-SX. PASS: Verify that permission of /var/log/ceph/ceph-init.log file is set to 640. Story: 2011241 Task: 51365 Change-Id: I50fc1e0ac5b779a27402d27dc4f6a295dce7d0a9 Signed-off-by: Jagatguru Prasad Mishra --- ceph/ceph/files/ceph.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ceph/ceph/files/ceph.sh b/ceph/ceph/files/ceph.sh index d427f40f3..1b42bdffd 100644 --- a/ceph/ceph/files/ceph.sh +++ b/ceph/ceph/files/ceph.sh @@ -33,6 +33,9 @@ start () if [ ! -f ${CEPH_FILE} ]; then touch ${CEPH_FILE} fi + + #restrict log file access + chmod 0640 ${LOGFILE} } stop ()