Merge pull request #397 from JAORMX/log-perms

Restrict log permissions
openshift · Oct 27, 2020 · e87b62d · e87b62d
2 parents 14b0742 + 19b14c2
commit e87b62d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/bindata/v3.11.0/openshift-apiserver/deploy.yaml b/bindata/v3.11.0/openshift-apiserver/deploy.yaml
@@ -46,7 +46,7 @@ spec:
           terminationMessagePolicy: FallbackToLogsOnError
           image: ${IMAGE}
           imagePullPolicy: IfNotPresent
-          command: ['sh', '-c', 'chmod 0700 /var/log/openshift-apiserver']
+          command: ['sh', '-c', 'chmod 0700 /var/log/openshift-apiserver && touch /var/log/openshift-apiserver/audit.log && chmod 0600 /var/log/openshift-apiserver/*']
           securityContext:
             privileged: true
           volumeMounts:

diff --git a/pkg/operator/v311_00_assets/bindata.go b/pkg/operator/v311_00_assets/bindata.go