search

redhat-cop / sqlserver-coi

This repository holds code, documentation, playbooks and other artifacts relating to deployment of SQL Server on RHEL and OpenShift.
12 stars 8 forks source link

Incorrect Permission for /var/opt/mssql/log/assessments/ #15

Open koalakangaroo opened 3 years ago

koalakangaroo commented 3 years ago

The permission for /var/opt/mssql/log/assessments/ should be set to 0755. Otherwise, the /opt/mssql/bin/runassessment.ps1 script cannot access the file under it e.g. assessment-latest.

limershein commented 3 years ago

submitted pull request limershein-patch-3 for review. I set the permissions to 0700 and not 0755 since some of information contained within the output could be almost certainly be used to develop a database denial of service attack - we don't want it to be publicly accessible and relaxed directory permissions can promote bad behavior.