From 700efe1eda1e3106948e33edd639d134eba25bd1 Mon Sep 17 00:00:00 2001
From: Nick Anderson <nick@cmdln.org>
Date: Tue, 12 Dec 2023 13:06:04 -0600
Subject: [PATCH] Policy now manages Mission Portals httpd.conf ownership and
 permissions

Ticket: ENT-11096
Changelog: Title
---
 cfe_internal/enterprise/mission_portal.cf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cfe_internal/enterprise/mission_portal.cf b/cfe_internal/enterprise/mission_portal.cf
index 6d8f474ef3..1fee4ac272 100644
--- a/cfe_internal/enterprise/mission_portal.cf
+++ b/cfe_internal/enterprise/mission_portal.cf
@@ -201,6 +201,11 @@ bundle agent mission_portal_apache_from_stage(config, staged_config)
                   the output to keep policy runs clean and not generate lots of
                   unnecessary email.";
 
+      # Note: RPM package spec must align or the file will come up in rpm verification
+      "$(config)"  -> { "ENT-11096" }
+        handle => "cfengine_mp_apache_config_ownership_perms",
+        perms => mog( "400", "root", "root");
+
   commands:
 
     !systemd_supervised::