redhat-cop / infra.leapp

Collection of Ansible roles for automating RHEL in-place upgrades using Leapp.
MIT License
43 stars 33 forks source link

Wrong mode for /var/log/leapp #200

Closed swapdisk closed 1 month ago

swapdisk commented 1 month ago

The analysis role changes the /var/log/leapp directory to 0755 mode. This differs from the 0700 mode provided by the leapp package. Because of this, we are now seeing the recently introduced actor check_custom_modifications_actor is reporting a "Detected modified files of the in-place upgrade tooling" high severity finding and recommending "To restore original files reinstall related packages" remediation hint.

Allow me to update the role to set 0700 mode so we aren't triggering this finding on the report.