CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-26 14:37:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Lock down Backups folder permissions

Browse Source
This commit is contained in:
Mike Reeves
2021-02-05 22:17:31 -05:00
parent 4d6d2edd17
commit 8f97973fac
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/common/init.sls
+8
View File
@@ -231,6 +231,14 @@ commonlogrotateconf:
- dayweek: '*' - dayweek: '*'
{% if role in ['eval', 'manager', 'managersearch', 'standalone'] %} {% if role in ['eval', 'manager', 'managersearch', 'standalone'] %}
# Lock permissions on the backup directory
file.directory:
- name: /nsm/backup
- user: 0
- group: 0
- makedirs: True
- mode: 700
# Add config backup # Add config backup
/usr/sbin/so-config-backup > /dev/null 2>&1: /usr/sbin/so-config-backup > /dev/null 2>&1:
cron.present: cron.present: