ansible-hardening/releasenotes/notes/disable-rpm-perms-fix-by-default-b164e39717f0ada7.yaml
Major Hayden 7caec98c14 Disable file perm/ownership reset
Although setting file permissions and ownership based on the contents
of the RPM database is a good practice, it causes significant
deployment delays and can cause issues if a system administrator has
intentionally changed file permissions or ownership to meet their
specific needs.

This patch disables the tasks that set the permissions/ownership back
to their original values but leaves them enabled in the gate job.

Change-Id: I185f6755d9bddf58e23d6512f4728522c36306c0
2017-03-04 15:27:45 +00:00

7 lines
250 B
YAML

---
security:
- |
The security role will no longer fix file permissions and ownership based
on the contents of the RPM database by default. Deployers can opt in for
these changes by setting ``security_reset_perm_ownership`` to ``yes``.