/var/log/audit ownership/permissions

Ondrej Moris omoris at redhat.com
Thu Jul 21 09:48:04 UTC 2016


Hi, I noticed that in 2.6.5 /var/log/audit permission were dropped from
750 to 600. I am fine with that but while I see the motivation [1], I
just cannot find where is that happening in the code. Besides, specfile
still contains:

%attr(750,root,root) %dir %{_var}/log/audit

and hence 'rpm -V audit' obviously fails.

[1]
http://post-office.corp.redhat.com/archives/tech-list/2016-May/msg00468.html

--
Ondrej




More information about the Linux-audit mailing list