canonical / canonical/microceph

remove world read permission for log files

Open
#529 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
Go
Stars
396
Forks
74
Avg merge
2d 20h
Merged PRs (30d)
7

Description

As part of an investigation to make DISA-STIG recommendations for MicroCeph, our external consultant found this issue:

/var/snap/microceph/common/log has 4 log files (ceph-mds*, ceph-mon*, ceph-mgr*, and ceph.osd*) that have world readable permissions (644). Those should be changed to 640 permissions.

Contributor guide

Open the contributing guide

Research direction

Start by locating how /var/snap/microceph/common/log creates ceph-mds*, ceph-mon*, ceph-mgr*, and ceph.osd* log files. Confirm that each file is created with 640 permissions rather than 644, then verify the resulting permissions for all four log-file patterns.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.