canonical / canonical/microceph
remove world read permission for log files
Open
bug
- Dominant language
- Go
- Stars
- 396
- Forks
- 74
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 7
Description
As part of an investigation to make DISA-STIG recommendations for MicroCeph, our external consultant found this issue:
/var/snap/microceph/common/log has 4 log files (ceph-mds*, ceph-mon*, ceph-mgr*, and ceph.osd*) that have world readable permissions (644). Those should be changed to 640 permissions.
Contributor guide
Research direction
Start by locating how /var/snap/microceph/common/log creates ceph-mds*, ceph-mon*, ceph-mgr*, and ceph.osd* log files. Confirm that each file is created with 640 permissions rather than 644, then verify the resulting permissions for all four log-file patterns.
Written by the indexing model from the issue text.
Assessment
- Domain
- infrastructure, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100