Policy now manages Mission Portals httpd.conf ownership and permissions

Ticket: ENT-11096 Changelog: Title
cfengine · Dec 12, 2023 · 700efe1 · 700efe1
1 parent 115d55e
commit 700efe1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/cfe_internal/enterprise/mission_portal.cf b/cfe_internal/enterprise/mission_portal.cf
@@ -201,6 +201,11 @@ bundle agent mission_portal_apache_from_stage(config, staged_config)
                   the output to keep policy runs clean and not generate lots of
                   unnecessary email.";
 
+      # Note: RPM package spec must align or the file will come up in rpm verification
+      "$(config)"  -> { "ENT-11096" }
+        handle => "cfengine_mp_apache_config_ownership_perms",
+        perms => mog( "400", "root", "root");
+
   commands:
 
     !systemd_supervised::