Description of problem:
The directory /var/log/ceilometer is world readable and contains log files that are readable, which can result in the exposure of sensitive information. The 'other readable/execute' bits need to be removed from the /var/log/ceilometer directory.

Because no sensitive data was found in the files, this is being raised as a hardening bug, and not a flaw.

Version-Release number of selected component (if applicable):
openstack-ceilometer-5.0.5-1.el7ost

How reproducible:
List /var/log directory for openstack-ceilometer:
$ ls -la ceilometer/                                               
total 1384                                                                                          
drwxr-xr-x.  2 ceilometer root         4096 Mar  7 00:49 .                                          
drwxr-xr-x. 27 root       root         4096 Mar 12 19:12 ..                                         
-rw-r--r--.  1 ceilometer ceilometer  49542 Mar 12 19:13 agent-notification.log                     
-rw-r--r--.  1 ceilometer ceilometer 746097 Mar 12 19:13 alarm-evaluator.log                        
-rw-r--r--.  1 ceilometer ceilometer   2166 Mar 12 19:13 alarm-notifier.log                         
-rw-r--r--.  1 ceilometer ceilometer  25548 Mar 12 19:13 api.log                                    
-rw-r--r--.  1 ceilometer ceilometer    565 Mar  6 21:58 ceilometer-dbsync.log                      
-rw-r--r--.  1 ceilometer ceilometer 198356 Mar 12 19:13 central.log                                
-rw-r--r--.  1 ceilometer ceilometer   1627 Mar 12 19:13 collector.log                              
-rw-r--r--.  1 ceilometer ceilometer 170651 Mar 12 19:13 compute.log

Actual results:
Directory and files are world readable.

Expected results:
Directory and files should not be world readable.