robertdebock / ansible-role-rsyslog

Install and configure rsyslog on your system.
https://robertdebock.nl/
Apache License 2.0
36 stars 40 forks source link

Update file permissions to enforce security #36

Open Tuxem opened 2 years ago

Tuxem commented 2 years ago

Proposed feature

For security reason, it's recommended to set root as the owner and group and have a 0600 permissions on rsyslog files

Rationale

Security reasons (CF CIS : https://github.com/ansible-lockdown/RHEL7-CIS/tree/main)

Additional context

I might create a merge request monday if you don't see any trouble using this permissions ? Do you prefere I propose a merge with fixed values or with variables values ?