OPS-6042: Disable rule that makes log dir unreadable

ansible-lockdown / RHEL7-CIS

Ansible role for Red Hat 7 CIS Baseline

https://ansible-lockdown.readthedocs.io/en/latest/

MIT License

473 stars 303 forks source link

OPS-6042: Disable rule that makes log dir unreadable #206

Closed cheethoe closed 3 years ago

cheethoe commented 3 years ago

The rule removes read access from everyone but root. This breaks at least td-agent which tries to create it's log dir on start up but can't even find it and gets and error trying to create it because it thinks it's not there.