mirror of
https://github.com/dev-sec/ansible-collection-hardening
synced 2024-11-10 09:14:18 +00:00
384c097f8a
The tasks `Change shadow ownership to root and mode to 0600` and `Change passwd ownership to root and mode to 0644` only handle `/etc/shadow` and `/etc/passwd` respectively. But there multiple adjacent files that should be handled with these rules as well: - `/etc/gshadow` - `/etc/shadow-` - `/etc/gshadow-` - `/etc/group` - `/etc/shadow-` - `/etc/group-` This change adds those files to the rules, so that permissions are handled in the same way. Closes: #488 Signed-off-by: Claudius Heine <ch@denx.de> |
||
---|---|---|
.. | ||
apache_hardening@41bd7d7e9d | ||
mysql_hardening | ||
nginx_hardening | ||
os_hardening | ||
ssh_hardening | ||
windows_hardening@41e8a1893c |