Merge pull request #178 from shoekstra/fix_ubuntu_tests

Make ubuntu tests pass
dev-sec · Nov 16, 2017 · 568b327 · 568b327
2 parents 0476764 + c545dd2
commit 568b327
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/recipes/minimize_access.rb b/recipes/minimize_access.rb
@@ -53,3 +53,9 @@
   mode '0750'
   not_if { node['os-hardening']['security']['users']['allow'].include?('change_user') }
 end
+
+# /var/log should restricted to root or syslog on ubuntu systems
+directory '/var/log' do
+  owner 'root'
+  group node['platform'] == 'ubuntu' ? 'syslog' : 'root'
+end