Skip to content

Commit ec92d59

Browse files
authored
fixed permission gap with updating logstash-security.yml (#361)
add permissions and waiting for check. Findings 24 and 26
1 parent 51476c7 commit ec92d59

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

roles/logstash/tasks/logstash-security.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,8 @@
7474
src: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-ls.p12"
7575
dest: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-ls.p12_{{ ansible_date_time.iso8601_micro }}"
7676
mode: preserve
77+
owner: root
78+
group: root
7779
remote_src: true
7880
when: logstash_check_cert_file_ca_host.stat.exists
7981
register: logstash_move_cert_file_ca_host
@@ -94,6 +96,8 @@
9496
src: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-ls.zip"
9597
dest: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-ls.zip_{{ ansible_date_time.iso8601_micro }}"
9698
mode: preserve
99+
owner: root
100+
group: root
97101
remote_src: true
98102
when: logstash_check_cert_zip_file_ca_host.stat.exists
99103
register: logstash_move_cert_zip_file_ca_host

0 commit comments

Comments
 (0)