Description of problem:
The directory /var/log/openvswitch is world readable and contains log files that are readable, which can result in the exposure of sensitive information. The 'other readable/execute' bits need to be removed from the /var/log/openvswitch directory.
Because no sensitive data was found in the files, this is being raised as a hardening bug, and not a flaw.
Version-Release number of selected component (if applicable):
openvswitch-2.4.0-2.el7_2
Steps to reproduce:
$ ls -la /var/log/openvswitch
total 44
drwxr-xr-x. 2 root root 4096 Mar 5 19:07 .
drwxr-xr-x. 21 root root 4096 Mar 12 22:16 ..
-rw-r--r--. 1 root root 2135 Mar 12 22:16 ovsdb-server.log
-rw-r--r--. 1 root root 386 Mar 5 18:50 ovsdb-server.log-20170305.gz
-rw-r--r--. 1 root root 23931 Mar 12 22:17 ovs-vswitchd.log
-rw-r--r--. 1 root root 1741 Mar 5 18:52 ovs-vswitchd.log-20170305.gz