ansible-hardening/doc/source/developer-notes/V-38623.rst
Major Hayden a841e184de Docs: Update dev notes for Cat 2 controls
This patch updates the documentation for the developer notes associated
with the Cat 2 (Medium) controls applied by the security role.

Partial-bug: 1583744

Change-Id: Ic342f33942521db009185585a21208a4688f6ed3
2016-05-25 11:38:13 -05:00

9 lines
435 B
ReStructuredText

The mode on rsyslog files is set to ``0640`` by default in Ubuntu 14.04 and
Ubuntu 16.04 by default. CentOS 7 sets the mode to ``0600`` by default. The
Ansible tasks will adjust the rsyslog configuration so that any new log files
will have the mode set to ``0600``.
This will take effect the next time that log files are rotated with
``logrotate`` (configured in V-38624). Deployers can also make this change
manually with ``chmod``.