Description of problem:
The directory /var/log/ironic is world readable and contains log files that are readable, which can result in the exposure of sensitive information. The 'other readable/execute' bits need to be removed from the /var/log/ironic directory.
Because no sensitive data was found in the files, this is being raised as a hardening bug, and not a flaw.
Version-Release number of selected component (if applicable):
openstack-ironic-4.2.5-3.el7ost
How reproducible:
List /var/log directory for openstack-ironic:
$ ls -la ironic
total 712
drwxr-xr-x. 2 ironic ironic 78 Mar 7 00:58 .
drwxr-xr-x. 27 root root 4096 Mar 12 20:52 ..
-rw-r--r--. 1 ironic ironic 102618 Mar 12 20:52 ironic-api.log
-rw-r--r--. 1 ironic ironic 565378 Mar 12 20:53 ironic-conductor.log
-rw-r--r--. 1 root root 0 Mar 6 21:36 ironic-dbsync.log
Actual results:
Directory and files are world readable.
Expected results:
Directory and files should not be world readable.