Skip to content

Commit bbe151b

Browse files
committed
Stop changing permissions on files
These are causing changes to docker overlay filesystems with possible unintended consequences. It is also really slow to loop through so many files in ansible.
1 parent d18dbe4 commit bbe151b

File tree

1 file changed

+4
-1
lines changed
  • etc/kayobe/inventory/group_vars/overcloud

1 file changed

+4
-1
lines changed

etc/kayobe/inventory/group_vars/overcloud/cis

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -115,9 +115,12 @@ ubtu22cis_sshd:
115115
deny_users: ""
116116
deny_groups: ""
117117

118-
# Do not change /var/lib/docker permissions
118+
# The following rules change permissions on all files on every mounted
119+
# filesystem. We do not want to change /var/lib/docker permissions.
119120
ubtu22cis_no_group_adjust: false
120121
ubtu22cis_no_owner_adjust: false
122+
ubtu22cis_no_world_write_adjust: false
123+
ubtu22cis_suid_adjust: false
121124

122125
# Configure log rotation to prevent audit logs from filling the disk
123126
ubtu22cis_auditd:

0 commit comments

Comments
 (0)