Permissions of /var/log/apt/eipp.log.xz

tom-krieger / cis_security_hardening

Define a complete security baseline and monitor the baseline's rules. The definition of the baseline should be done in Hiera. The purpose of the module is to give the ability to setup a complete security baseline which not necessarily have to stick to industry security guides like the CIS benchmarks.

15 stars 9 forks source link

Permissions of /var/log/apt/eipp.log.xz #82

Open opentokix opened 1 month ago

opentokix commented 1 month ago

This file is under /var/log and is world readable (and getting changes back to world readable) so this will generate endless changes for the puppet runs when you enable

cis_security_hardening::rules::logfile_permissions:enforce: true

Non-world readable generic logfiles is good for the benchmark, but this file need to be ignored somehow.

See answer on the debian mailinglist here

tom-krieger commented 1 month ago

Will check that.